blog/.gitlab-ci.yml

image: oven/bun:alpine

cache:
  paths:
    - node_modules/

variables:
  NODE_ENV: "production"

# Rename to 'pages' for gitlab pages
build:
  stage: build

  before_script:
    - apk update && apk add git
    - bun install

  script:
    # Generate site
    - bun run build

  rules:
    # Only trigger through push & "Run pipeline" events not in "site" branch; Skip in renovate job
    - if: '$RENOVATE != "true" && $CI_COMMIT_REF_NAME != "site" && ($CI_PIPELINE_SOURCE == "push" || $CI_PIPELINE_SOURCE == "web")'
      when: always

  artifacts:
    paths:
      - public/
    expire_in: 30 days

test:
  stage: test

  script:
    # Homepage should exist and non-empty
    - sh check-homepage.sh

  rules:
    - if: '$RENOVATE != "true" && $CI_COMMIT_REF_NAME == "master" && ($CI_PIPELINE_SOURCE == "push" || $CI_PIPELINE_SOURCE == "web")'
      when: always

  artifacts:
    paths:
      - public/
    expire_in: 30 days

deploy:
  stage: deploy

  before_script:
    - apk update && apk add openssh-client rsync
    - mkdir -p ~/.ssh
    - chmod 700 ~/.ssh
    - echo "$SSH_KNOWN_HOSTS" > ~/.ssh/known_hosts
    - chmod 644 ~/.ssh/known_hosts
    - echo "$SSH_KEY_1" > ~/.ssh/id_host_1
    - chmod 600 ~/.ssh/id_host_1
    - echo "$SSH_KEY_2" > ~/.ssh/id_host_2
    - chmod 600 ~/.ssh/id_host_2
    - echo "$SSH_CONFIG" > ~/.ssh/config
    - chmod 600 ~/.ssh/config

  script:
    - rsync -azvh --delete public/ host-1:/var/www/
    - rsync -azvh --delete public/ host-2:/var/www/

  rules:
    - if: '$RENOVATE != "true" && $CI_COMMIT_REF_NAME == "master" && ($CI_PIPELINE_SOURCE == "push" || $CI_PIPELINE_SOURCE == "web")'
      when: always

deploy_pages:
  stage: deploy

  trigger:
    project: curben/curben.gitlab.io
    branch: master
    strategy: depend

  rules:
    - if: '$RENOVATE != "true" && $CI_COMMIT_REF_NAME == "master" && ($CI_PIPELINE_SOURCE == "push" || $CI_PIPELINE_SOURCE == "web")'
      when: always

# Check dependency update
renovate:
  before_script:
    - apk update && apk add git
    - bun install

  script:
    - bun install snyk @snyk/protect && bun run snyk
    - bun install renovate && bun run renovate

  # No artifact
  dependencies: []

  rules:
    - if: '$RENOVATE == "true" && $CI_COMMIT_REF_NAME == "master" && ($CI_PIPELINE_SOURCE == "schedule" || $CI_PIPELINE_SOURCE == "web")'
      when: always

include:
  - template: Security/Secret-Detection.gitlab-ci.yml
feat(ci): replace node with bun 2023-10-02 01:02:25 +00:00			`image: oven/bun:alpine`
first commit 2016-02-29 14:25:06 +00:00
docs(ci): comment 2023-10-02 00:58:34 +00:00			`cache:`
test: only run renovate on schedules not on master branch push 2018-10-28 08:16:18 +00:00			`paths:`
docs(ci): comment 2023-10-02 00:58:34 +00:00			`- node_modules/`
test: only run renovate on schedules not on master branch push 2018-10-28 08:16:18 +00:00
ci(gitlab): switch npm to pnpm - workaround for hexo issue - doesn't affect renovate 2020-05-16 06:09:19 +00:00			`variables:`
			`NODE_ENV: "production"`

docs(ci): comment 2023-10-02 00:58:34 +00:00			`# Rename to 'pages' for gitlab pages`
ci: after_script should only be used for cleanup - in case of job failure 2021-03-15 11:12:54 +00:00			`build:`
			`stage: build`
ci(gitlab): trigger job in curben/curben.gitlab.io - https://docs.gitlab.com/ee/ci/multi_project_pipelines.html - also dedup rules:if conditions 2020-12-12 14:15:39 +00:00
ci: update github mirror 2020-04-15 02:38:39 +00:00			`before_script:`
ci: after_script should only be used for cleanup - in case of job failure 2021-03-15 11:12:54 +00:00			`- apk update && apk add git`
feat(ci): replace node with bun 2023-10-02 01:02:25 +00:00			`- bun install`
ci: update github mirror 2020-04-15 02:38:39 +00:00
Add snyk to CI Use proper snyk flow https://snyk.io/docs/using-snyk/ 2018-09-25 00:16:25 +00:00			`script:`
docs(ci): comment 2023-10-02 00:58:34 +00:00			`# Generate site`
feat(ci): replace node with bun 2023-10-02 01:02:25 +00:00			`- bun run build`
ci: deploy to web servers (test) 2021-03-12 08:04:58 +00:00
ci: replace only/except with rules syntax - https://docs.gitlab.com/ee/ci/yaml/README.html#rules - only/except may be deprecated in future * https://docs.gitlab.com/ee/ci/yaml/README.html#onlyexcept-basic 2019-12-23 23:36:51 +00:00			`rules:`
ci: only exclude build job in "site" branch 2023-10-02 00:57:04 +00:00			`# Only trigger through push & "Run pipeline" events not in "site" branch; Skip in renovate job`
			`- if: '$RENOVATE != "true" && $CI_COMMIT_REF_NAME != "site" && ($CI_PIPELINE_SOURCE == "push" \|\| $CI_PIPELINE_SOURCE == "web")'`
ci: replace only/except with rules syntax - https://docs.gitlab.com/ee/ci/yaml/README.html#rules - only/except may be deprecated in future * https://docs.gitlab.com/ee/ci/yaml/README.html#onlyexcept-basic 2019-12-23 23:36:51 +00:00			`when: always`
chore: don't run test job when renovate runs 2018-11-06 08:37:35 +00:00
ci: specify artifact between jobs 2021-03-15 22:47:39 +00:00			`artifacts:`
			`paths:`
			`- public/`
			`expire_in: 30 days`
ci(gitlab): remove gitlab pages - partially revert 44aa5c936293ffa8ef5e6d3bac0e1ed3852f4afe - https://gitlab.com/curben/curben.gitlab.io 2020-12-12 09:06:16 +00:00
ci: after_script should only be used for cleanup - in case of job failure 2021-03-15 11:12:54 +00:00			`test:`
			`stage: test`

			`script:`
docs(ci): comment 2023-10-02 00:58:34 +00:00			`# Homepage should exist and non-empty`
			`- sh check-homepage.sh`
ci: after_script should only be used for cleanup - in case of job failure 2021-03-15 11:12:54 +00:00
			`rules:`
			`- if: '$RENOVATE != "true" && $CI_COMMIT_REF_NAME == "master" && ($CI_PIPELINE_SOURCE == "push" \|\| $CI_PIPELINE_SOURCE == "web")'`
			`when: always`

ci: specify artifact between jobs 2021-03-15 22:47:39 +00:00			`artifacts:`
			`paths:`
			`- public/`
			`expire_in: 30 days`

ci: after_script should only be used for cleanup - in case of job failure 2021-03-15 11:12:54 +00:00			`deploy:`
ci(gitlab): trigger job in curben/curben.gitlab.io - https://docs.gitlab.com/ee/ci/multi_project_pipelines.html - also dedup rules:if conditions 2020-12-12 14:15:39 +00:00			`stage: deploy`
ci: after_script should only be used for cleanup - in case of job failure 2021-03-15 11:12:54 +00:00
			`before_script:`
			`- apk update && apk add openssh-client rsync`
			`- mkdir -p ~/.ssh`
			`- chmod 700 ~/.ssh`
			`- echo "$SSH_KNOWN_HOSTS" > ~/.ssh/known_hosts`
			`- chmod 644 ~/.ssh/known_hosts`
			`- echo "$SSH_KEY_1" > ~/.ssh/id_host_1`
			`- chmod 600 ~/.ssh/id_host_1`
			`- echo "$SSH_KEY_2" > ~/.ssh/id_host_2`
			`- chmod 600 ~/.ssh/id_host_2`
			`- echo "$SSH_CONFIG" > ~/.ssh/config`
			`- chmod 600 ~/.ssh/config`

			`script:`
			`- rsync -azvh --delete public/ host-1:/var/www/`
			`- rsync -azvh --delete public/ host-2:/var/www/`

ci: 'trigger' cannot be used with 'script' - https://docs.gitlab.com/ee/ci/yaml/#trigger 2021-03-15 22:30:32 +00:00			`rules:`
			`- if: '$RENOVATE != "true" && $CI_COMMIT_REF_NAME == "master" && ($CI_PIPELINE_SOURCE == "push" \|\| $CI_PIPELINE_SOURCE == "web")'`
			`when: always`

			`deploy_pages:`
			`stage: deploy`

ci(gitlab): trigger job in curben/curben.gitlab.io - https://docs.gitlab.com/ee/ci/multi_project_pipelines.html - also dedup rules:if conditions 2020-12-12 14:15:39 +00:00			`trigger:`
			`project: curben/curben.gitlab.io`
			`branch: master`
ci(gitlab): fix trigger strategry syntax - https://docs.gitlab.com/ee/ci/multi_project_pipelines.html#mirroring-status-from-triggered-pipeline 2020-12-12 14:17:28 +00:00			`strategy: depend`
ci: 'trigger' cannot be used with 'script' - https://docs.gitlab.com/ee/ci/yaml/#trigger 2021-03-15 22:30:32 +00:00
ci(gitlab): trigger job in curben/curben.gitlab.io - https://docs.gitlab.com/ee/ci/multi_project_pipelines.html - also dedup rules:if conditions 2020-12-12 14:15:39 +00:00			`rules:`
			`- if: '$RENOVATE != "true" && $CI_COMMIT_REF_NAME == "master" && ($CI_PIPELINE_SOURCE == "push" \|\| $CI_PIPELINE_SOURCE == "web")'`
			`when: always`

docs(ci): comment 2023-10-02 00:58:34 +00:00			`# Check dependency update`
			`renovate:`
ci(gitlab): move `npm install` to job script - global script somehow doesn't work anymore 2020-05-15 10:34:26 +00:00			`before_script:`
ci: utilize Gitlab's mirroring - https://docs.gitlab.com/ee/user/project/repository/repository_mirroring.html - Commits to protected branches are push to mirror within a minute - Less one private key to manage 2020-07-12 07:41:20 +00:00			`- apk update && apk add git`
feat(ci): replace node with bun 2023-10-02 01:02:25 +00:00			`- bun install`
ci(gitlab): move `npm install` to job script - global script somehow doesn't work anymore 2020-05-15 10:34:26 +00:00
test: only run renovate on schedules not on master branch push 2018-10-28 08:16:18 +00:00			`script:`
feat(ci): replace node with bun 2023-10-02 01:02:25 +00:00			`- bun install snyk @snyk/protect && bun run snyk`
			`- bun install renovate && bun run renovate`
Remove gzip from CI now handled by hexo-yam 2018-09-29 06:03:51 +00:00
ci: specify artifact between jobs 2021-03-15 22:47:39 +00:00			`# No artifact`
			`dependencies: []`

ci: replace only/except with rules syntax - https://docs.gitlab.com/ee/ci/yaml/README.html#rules - only/except may be deprecated in future * https://docs.gitlab.com/ee/ci/yaml/README.html#onlyexcept-basic 2019-12-23 23:36:51 +00:00			`rules:`
ci(gitlab): trigger job in curben/curben.gitlab.io - https://docs.gitlab.com/ee/ci/multi_project_pipelines.html - also dedup rules:if conditions 2020-12-12 14:15:39 +00:00			`- if: '$RENOVATE == "true" && $CI_COMMIT_REF_NAME == "master" && ($CI_PIPELINE_SOURCE == "schedule" \|\| $CI_PIPELINE_SOURCE == "web")'`
ci: replace only/except with rules syntax - https://docs.gitlab.com/ee/ci/yaml/README.html#rules - only/except may be deprecated in future * https://docs.gitlab.com/ee/ci/yaml/README.html#onlyexcept-basic 2019-12-23 23:36:51 +00:00			`when: always`
chore(ci): enable secret detection - https://docs.gitlab.com/ee/user/application_security/secret_detection/ 2021-06-20 06:49:52 +00:00
			`include:`
			`- template: Security/Secret-Detection.gitlab-ci.yml`