diff --git a/.gitignore b/.gitignore index 30e2d7f..41c747c 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,4 @@ vw-data/ +interstices/ +lucas/ app.env \ No newline at end of file diff --git a/Jenkinsfile b/Jenkinsfile new file mode 100644 index 0000000..8c77dae --- /dev/null +++ b/Jenkinsfile @@ -0,0 +1,72 @@ +pipeline { + agent any + + parameters { + choice(name: 'USER_NAME', choices: ['lucas', 'interstices'], description: 'Quelle instance déployer ?') + } + + environment { + GITEA_REPO_PATH = "lucas/vaultwarden" + GITEA_API_URL = "https://gitea.lucasroyer.fr/api/v1" + DOCKER_HOST = "unix:///run/user/1001/docker.sock" + + BASE_DIR = "/home/lucas/services/vaultwarden/${params.USER_NAME}" + } + + stages { + stage('Check git...') { + steps { + checkout scm + } + } + stage('Deploy') { + steps { + withCredentials([file(credentialsId: "vaultwarden-app-env-${params.USER_NAME}", variable: 'SECRET_ENV')]) { + script { + echo "Deploying Vaultwarden for ${params.USER_NAME}..." + + sh "mkdir -p ${env.BASE_DIR}/vw-data" + + sh "cp docker-compose.yml ${env.BASE_DIR}/docker-compose.yml" + sh "cp \$SECRET_ENV ${env.BASE_DIR}/app.env" + + dir("${env.BASE_DIR}") { + sh """ + docker compose -p vw-${params.USER_NAME} up -d --force-recreate --remove-orphans + """ + } + } + } + } + } + } + + post { + always { + script { + echo "Send Gitea check..." + // Get and store SHA + def commitSha = sh(script: 'git rev-parse HEAD', returnStdout: true).trim() + + // Convert from Jenkins to Gitea API + def buildState = (currentBuild.currentResult == 'SUCCESS') ? 'success' : 'failure' + def buildDesc = (currentBuild.currentResult == 'SUCCESS') ? 'Build successful' : 'Build failed' + + // Send it to Gitea API with secret 'gitea-token' + withCredentials([string(credentialsId: 'gitea-token', variable: 'GITEA_TOKEN')]) { + // Use \$TOKEN to avoid jenkins to print token in logs + sh """ + curl -f -X POST "${GITEA_API_URL}/repos/${GITEA_REPO_PATH}/statuses/${commitSha}" \ + -H "Authorization: token \$GITEA_TOKEN" \ + -H "Content-Type: application/json" \ + -d '{"state": "${buildState}", "target_url": "${env.BUILD_URL}", "description": "${buildDesc}", "context": "jenkins-ci"}' + """ + } + } + echo "Clean unused image..." + sh "docker image prune -f" + } + success { echo "Success !" } + failure { echo "Failed." } + } +} \ No newline at end of file