phpnetmap/.github/workflows/deploy.yml at main · marcelofmatos/phpnetmap · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
# -----------------------------------------------------------------------------
# Toggle de GitHub Environments
# -----------------------------------------------------------------------------
# O job abaixo usa a variável de repositório `USE_ENVIRONMENTS` para decidir
# se vincula o deploy a um GitHub Environment (`production`).
#
# Configuração em Settings → Secrets and variables → Actions:
#
#   Variables → New repository variable
#     • USE_ENVIRONMENTS = "false"  → bypass: nenhum environment é exigido.
#                                     Secrets lidos do nível repositório.
#     • USE_ENVIRONMENTS = "true"   → modo normal: exige que o environment
#                                     `production` exista.
#                                     Secrets do environment têm precedência.
#
#   Secrets necessários (em repository secrets enquanto bypass; podem ser
#   movidos para environment secrets depois):
#     • PORTAINER_DEPLOY_PRD_WEBHOOK_URL
#
# Quando o environment for criado no GitHub, basta alterar USE_ENVIRONMENTS
# para "true" — não é necessário editar este arquivo.
#
# O deploy de homologação (HMG) também é manual — ver workflow "🚢 Deploy (HMG)"
# (.github/workflows/deploy-hmg.yml).
# -----------------------------------------------------------------------------

name: 🚢 Deploy (PRD)

on:
  workflow_dispatch:

concurrency:
  group: deploy-prd
  cancel-in-progress: false

jobs:
  deploy-prd:
    runs-on: ubuntu-latest
    environment:
      name: ${{ vars.USE_ENVIRONMENTS == 'true' && 'production' || '' }}
    permissions: {}
    steps:
      - name: 🚀 Trigger Portainer webhook (PRD)
        env:
          WEBHOOK_URL: ${{ secrets.PORTAINER_DEPLOY_PRD_WEBHOOK_URL }}
        run: |
          if [ -z "$WEBHOOK_URL" ]; then
            echo "::error::PORTAINER_DEPLOY_PRD_WEBHOOK_URL secret is not set for environment 'production'."
            exit 1
          fi
          curl -X POST "$WEBHOOK_URL" \
            -H "Content-Type: application/json" \
            -d '{"ref":"main"}' \
            --fail --silent --show-error
          echo "Production deploy triggered."