From 946311e53a3e99ad6a7a76edcdc2c979cc59da0c Mon Sep 17 00:00:00 2001
From: cheney <qian.huang@sunyard.com>
Date: Thu, 16 Jul 2026 11:31:34 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B5=8B=E8=AF=95=20cicd?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .dockerignore               | 12 ++++++++++
 .gitea/workflows/deploy.yml | 48 +++++++++++++++++++++++++++++++++++++
 Dockerfile                  | 23 ++++++++++++++++++
 deploy/start.sh             | 33 +++++++++++++++++++++++++
 4 files changed, 116 insertions(+)
 create mode 100644 .dockerignore
 create mode 100644 .gitea/workflows/deploy.yml
 create mode 100644 Dockerfile
 create mode 100644 deploy/start.sh

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..f42c46e
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,12 @@
+# 构建镜像时排除的目录/文件
+node_modules
+.git
+.gitea
+data
+docs
+test
+deploy
+*.log
+.dockerignore
+Dockerfile
+README.md
\ No newline at end of file
diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
new file mode 100644
index 0000000..8aaa995
--- /dev/null
+++ b/.gitea/workflows/deploy.yml
@@ -0,0 +1,48 @@
+# Gitea Actions 工作流：构建 Docker 镜像并通过 SSH 触发部署
+# 前置：Gitea Runner 已开放 Docker 访问（挂载 /var/run/docker.sock）
+name: build-and-deploy
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+env:
+  # 部署目标（CI/CD 与部署机同机，仅用 SSH 触发 start.sh）
+  DEPLOY_HOST: bh.vps.honor3.com
+  DEPLOY_USER: root
+  DEPLOY_DIR: /app/registry
+  SSH_KEY: /keypair/id_rsa
+  IMAGE_NAME: registry-app
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 检出代码
+        uses: actions/checkout@v4
+
+      - name: 生成镜像 tag（短 commit）
+        id: meta
+        run: echo "tag=$(echo ${GITHUB_SHA} | cut -c1-8)" >> "$GITHUB_OUTPUT"
+
+      - name: 构建 Docker 镜像
+        run: |
+          docker build \
+            -t "${IMAGE_NAME}:${{ steps.meta.outputs.tag }}" \
+            -t "${IMAGE_NAME}:latest" \
+            .
+
+      - name: 上传 start.sh 到部署目录
+        run: |
+          install -m 600 "${SSH_KEY}" /tmp/deploy_key
+          mkdir -p ~/.ssh
+          ssh-keyscan -H "${DEPLOY_HOST}" >> ~/.ssh/known_hosts 2>/dev/null
+          ssh -i /tmp/deploy_key "${DEPLOY_USER}@${DEPLOY_HOST}" "mkdir -p ${DEPLOY_DIR}"
+          scp -i /tmp/deploy_key deploy/start.sh "${DEPLOY_USER}@${DEPLOY_HOST}:${DEPLOY_DIR}/start.sh"
+          ssh -i /tmp/deploy_key "${DEPLOY_USER}@${DEPLOY_HOST}" "chmod +x ${DEPLOY_DIR}/start.sh"
+
+      - name: 远程执行部署
+        run: |
+          ssh -i /tmp/deploy_key "${DEPLOY_USER}@${DEPLOY_HOST}" \
+            "IMAGE_TAG=${{ steps.meta.outputs.tag }} ${DEPLOY_DIR}/start.sh"
\ No newline at end of file
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..22c6183
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,23 @@
+# 生产运行镜像：仅安装生产依赖，不携带测试与开发工具
+FROM node:22-alpine
+
+WORKDIR /app
+
+# 先复制清单以利用镜像层缓存
+COPY package.json package-lock.json ./
+
+# 仅安装生产依赖
+RUN npm ci --omit=dev && npm cache clean --force
+
+# 复制运行时源码与静态资源
+COPY src ./src
+COPY public ./public
+
+# 数据目录（容器内），由外部卷挂载持久化
+RUN mkdir -p /app/data/configs
+
+ENV NODE_ENV=production
+ENV PORT=3000
+EXPOSE 3000
+
+CMD ["node", "src/server.js"]
\ No newline at end of file
diff --git a/deploy/start.sh b/deploy/start.sh
new file mode 100644
index 0000000..0434679
--- /dev/null
+++ b/deploy/start.sh
@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+# 部署脚本：在部署机上停止旧容器并启动新版镜像
+# 由 CI/CD 通过 ssh 调用，CI/CD 通过 IMAGE_TAG 环境变量传入本次镜像 tag
+# 依赖：本机已安装 docker；工作目录 /app/registry 用于持久化 data/
+
+set -euo pipefail
+
+IMAGE_NAME="registry"
+IMAGE_TAG="${IMAGE_TAG:-latest}"
+CONTAINER_NAME="registry"
+HOST_PORT="${HOST_PORT:-8008}"
+APP_DIR="$(cd "$(dirname "$0")" && pwd)"
+DATA_DIR="${APP_DIR}/data"
+
+echo "[start.sh] 使用镜像：${IMAGE_NAME}:${IMAGE_TAG}"
+mkdir -p "${DATA_DIR}/configs"
+
+# 停止并清理旧容器（若不存在则忽略）
+if docker ps -a --format '{{.Names}}' | grep -qx "${CONTAINER_NAME}"; then
+  echo "[start.sh] 停止并删除旧容器 ${CONTAINER_NAME}"
+  docker rm -f "${CONTAINER_NAME}" >/dev/null
+fi
+
+# 启动新容器：数据目录挂载到宿主机以持久化
+echo "[start.sh] 启动新容器"
+docker run -d \
+  --name "${CONTAINER_NAME}" \
+  --restart unless-stopped \
+  -p "${HOST_PORT}:3000" \
+  -v "${DATA_DIR}:/app/data" \
+  "${IMAGE_NAME}:${IMAGE_TAG}"
+
+echo "[start.sh] 部署完成：http://localhost:${HOST_PORT}"
\ No newline at end of file