central-europe-testing-deploy.yml

name: Deploy to Europe Central testing
on:
  workflow_dispatch:

jobs:
  build-deploy:
    name: Build and deploy to Europe testing
    runs-on: ubuntu-latest
    environment:
      name: testing-europe
      url: https://central-europe-testing.curseofmirra.com/

    steps:
      - uses: actions/checkout@v4

      - name: Tailscale
        uses: tailscale/github-action@v2
        with:
          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
          oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
          tags: tag:ci

      - name: Create ssh private key file from env var
        env:
          SSH_KEY: ${{ secrets.SSH_KEY }}
          SSH_HOST: ${{ vars.TS_CENTRAL_HOST }}
        run: |
          set -ex
          mkdir -p ~/.ssh/
          sed -E 's/(-+(BEGIN|END) OPENSSH PRIVATE KEY-+) *| +/\1\n/g' <<< "$SSH_KEY" > ~/.ssh/id_ed25519
          chmod 400 ~/.ssh/id_ed25519
          retries=5; until ssh-keyscan $SSH_HOST >> ~/.ssh/known_hosts || [ $retries -eq 0 ]; do ((retries--)); sleep 5; done

      - name: Copy deploy script
        env:
          SSH_USERNAME: ${{ vars.SSH_USERNAME }}
          SSH_HOST: ${{ vars.TS_CENTRAL_HOST }}
        run: |
          set -ex
          rsync -avz --mkpath devops/deploy.sh ${SSH_USERNAME}@${SSH_HOST}:/home/${SSH_USERNAME}/deploy-script/

      - name: Execute deploy script
        env:
          SSH_HOST: ${{ vars.TS_CENTRAL_HOST }}
          SSH_USERNAME: ${{ vars.SSH_USERNAME }}
          MIX_ENV: ${{ vars.MIX_ENV }}
          RELEASE: central_backend
          PHX_SERVER: ${{ vars.PHX_SERVER }}
          PHX_HOST: ${{ vars.HOST }}
          PORT: ${{ vars.ARENA_PORT }}
          GOOGLE_CLIENT_ID: ${{ vars.GOOGLE_CLIENT_ID }}
          BOT_MANAGER_PORT: ${{ vars.BOT_MANAGER_PORT }}
          BOT_MANAGER_HOST: ${{ vars.LOADTEST_CLIENT_HOST }}
          DATABASE_URL: ${{ secrets.DATABASE_URL }}
          SECRET_KEY_BASE: ${{ secrets.SECRET_KEY_BASE }}
          JWT_PRIVATE_KEY_BASE_64: ${{ secrets.JWT_PRIVATE_KEY_BASE_64 }}
          NEWRELIC_APP_NAME: ${{ vars.NEWRELIC_APP_NAME }}
          NEWRELIC_KEY: ${{ secrets.NEWRELIC_KEY }}
          DBUS_SESSION_BUS_ADDRESS: ${{ vars.DBUS_SESSION_BUS_ADDRESS }}
          BRANCH_NAME: ${{ github.head_ref || github.ref_name }}
        run: |
          set -ex
          ssh ${SSH_USERNAME}@${SSH_HOST} \
                BRANCH_NAME=${BRANCH_NAME} \
                MIX_ENV=${MIX_ENV} \
                RELEASE=${RELEASE} \
                PHX_SERVER=${PHX_SERVER} \
                PHX_HOST=${PHX_HOST} \
                PORT=${PORT} \
                GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID} \
                BOT_MANAGER_PORT=${BOT_MANAGER_PORT} \
                BOT_MANAGER_HOST=${BOT_MANAGER_HOST} \
                DATABASE_URL=${DATABASE_URL} \
                SECRET_KEY_BASE=${SECRET_KEY_BASE} \
                JWT_PRIVATE_KEY_BASE_64=${JWT_PRIVATE_KEY_BASE_64} \
                NEWRELIC_APP_NAME=${NEWRELIC_APP_NAME} \
                NEWRELIC_KEY=${NEWRELIC_KEY} \
                DBUS_SESSION_BUS_ADDRESS=${DBUS_SESSION_BUS_ADDRESS} \
                /home/${SSH_USERNAME}/deploy-script/deploy.sh