Update Docker compose and Gitea Actions deployment for staging

.gitea/workflows/deploy.yml

@@ -1,23 +1,44 @@
-name: CI/CD Deployment
+name: Production Build & Deploy
 
 on:
   push:
     branches:
       - master
       - main
+      - staging
 
 jobs:
-  deploy:
+  build-and-deploy:
-    runs-on: ubuntu-latest
+    runs-on: webserver
     steps:
-      - name: Deploy via SSH
+      - name: Code auschecken
-        uses: appleboy/ssh-action@master
+        uses: actions/checkout@v4
+
+      - name: Docker login to Gitea registry
+        run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login gitea.hephex.de -u "${{ secrets.REGISTRY_USER }}" --password-stdin
+
+      - name: Build Docker image
+        run: |
+          docker build -t gitea.hephex.de/daniel/websitedummy:latest -f Dockerfile .
+
+      - name: Push Docker image
+        run: docker push gitea.hephex.de/daniel/websitedummy:latest
+
+      - name: Clean up runner Docker cache
+        run: |
+          docker image prune -f
+          docker builder prune -f
+
+      - name: Deploy via SSH to Debian Server
+        uses: appleboy/ssh-action@v0.1.5
         with:
-          host: ${{ secrets.DEBIAN_HOST }}
+          host: 192.168.178.132
-          username: ${{ secrets.DEBIAN_USER }}
+          username: ${{ secrets.PROXMOX_USER }}
-          key: ${{ secrets.SSH_PRIVATE_KEY }}
+          key: ${{ secrets.PROXMOX_SSH_KEY }}
-          port: 22
           script: |
             cd /opt/websitedummy
-            git pull origin master || git pull origin main
+            # Docker Login auf dem Zielserver
-            docker compose up -d --build
+            echo "${{ secrets.REGISTRY_TOKEN }}" | docker login gitea.hephex.de -u "${{ secrets.REGISTRY_USER }}" --password-stdin
+            docker compose pull
+            docker compose up -d
+            docker image prune -f

docker-compose.yml

@@ -2,8 +2,7 @@ version: '3.8'
 
 services:
   websitedummy:
-    build: .
+    image: gitea.hephex.de/daniel/websitedummy:latest
-    image: websitedummy:latest
     container_name: websitedummy
     restart: always
     read_only: true