80 lines
2.1 KiB
YAML
80 lines
2.1 KiB
YAML
# Woodpecker CI pipeline template.
|
|
#
|
|
# Runs on the local backend — image: bash specifies the shell.
|
|
# Triggers on push to main branch.
|
|
#
|
|
# Flow: install → lint-fix (optional) → lint + test → deploy
|
|
#
|
|
# Secrets (add in Woodpecker UI → repo or global settings):
|
|
# gitea_token — Gitea access token (for lint-fix auto-commit back)
|
|
#
|
|
# Deploy setup (one-time, as root on VPS):
|
|
# 1. Create deploy script:
|
|
# cp scripts/deploy.sh /usr/local/bin/deploy-<project-name>
|
|
# chmod 755 /usr/local/bin/deploy-<project-name>
|
|
# chown root:root /usr/local/bin/deploy-<project-name>
|
|
#
|
|
# 2. Find Woodpecker agent user:
|
|
# ps -o user= -p $(pgrep woodpecker-agent)
|
|
#
|
|
# 3. Set up sudoers (replace AGENT_USER and script name):
|
|
# echo 'AGENT_USER ALL=(root) NOPASSWD: /usr/local/bin/deploy-<project-name> *' \
|
|
# > /etc/sudoers.d/woodpecker-deploy
|
|
# chmod 0440 /etc/sudoers.d/woodpecker-deploy
|
|
# visudo -cf /etc/sudoers.d/woodpecker-deploy
|
|
|
|
when:
|
|
- event: push
|
|
branch: main
|
|
|
|
steps:
|
|
- name: install
|
|
image: bash
|
|
commands:
|
|
- npm ci
|
|
|
|
# Optional: auto-fix lint issues and commit back.
|
|
# Requires gitea_token secret. Remove this step if not needed.
|
|
# The [CI SKIP] in commit message prevents infinite loops.
|
|
#
|
|
# - name: lint-fix
|
|
# image: bash
|
|
# environment:
|
|
# GITEA_TOKEN:
|
|
# from_secret: gitea_token
|
|
# commands:
|
|
# - bash scripts/ci-lint-fix.sh
|
|
# depends_on: [install]
|
|
|
|
- name: lint
|
|
image: bash
|
|
commands:
|
|
- npx eslint .
|
|
depends_on: [install]
|
|
|
|
- name: test
|
|
image: bash
|
|
commands:
|
|
- npm test
|
|
depends_on: [install]
|
|
|
|
- name: sonar
|
|
image: bash
|
|
environment:
|
|
SONAR_TOKEN:
|
|
from_secret: sonar_token
|
|
commands:
|
|
- # sonar-scanner path set below
|
|
- /opt/sonar-scanner-6.2.1.4610-linux-x64/bin/sonar-scanner -Dsonar.token=$SONAR_TOKEN
|
|
depends_on: [lint, test]
|
|
|
|
# Uncomment when deploy script is set up on VPS:
|
|
#
|
|
# - name: deploy
|
|
# image: bash
|
|
# environment:
|
|
# CI: "true"
|
|
# commands:
|
|
# - sudo /usr/local/bin/deploy-<project-name> "${CI_WORKSPACE:-.}"
|
|
# depends_on: [lint, test]
|