From 16f77a66eb204b5d3b6289c1eb47feace6337206 Mon Sep 17 00:00:00 2001 From: Natalie Rose Date: Thu, 10 Sep 2026 13:19:32 +1000 Subject: [PATCH] Call deploy hook --- .gitea/workflows/build.yml | 26 +++++++++++++++++++++++++- 1 file changed, 25 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index 60ee0584..c619e8b4 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -16,7 +16,7 @@ jobs: uses: tailscale/github-action@v4 with: authkey: ${{ secrets.TAILSCALE_AUTHKEY }} - ping: rose-library,gitea + ping: rose-library,gitea,tle-meanjin-one-deploy-trigger version: latest - name: Checkout @@ -43,3 +43,27 @@ jobs: platforms: linux/amd64 cache-from: type=registry,ref=gitea.allosaurus-chromatic.ts.net/tlecommunity/server:buildcache cache-to: type=registry,ref=gitea.allosaurus-chromatic.ts.net/tlecommunity/server:buildcache,mode=max + + - name: Trigger Deploy + env: + DEPLOY_WEBHOOK_SECRET: ${{ secrets.DEPLOY_WEBHOOK_SECRET }} + run: | + set -euo pipefail + + payload=$(jq -nc \ + --arg actor "${GITHUB_ACTOR:-unknown}" \ + --arg ref "${GITHUB_REF:-unknown}" \ + --arg commit "${GITHUB_SHA:-unknown}" \ + --arg ci_run_url "${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}/actions/runs/${GITHUB_RUN_ID}" \ + '{actor: $actor, ref: $ref, commit: $commit, ci_run_url: $ci_run_url}') + + sig=$(printf '%s' "$payload" \ + | openssl dgst -sha256 -hmac "$DEPLOY_WEBHOOK_SECRET" \ + | sed 's/^.* //') + + curl -fsS --retry 3 --retry-delay 5 --retry-connrefused \ + -X POST \ + -H 'Content-Type: application/json' \ + -H "X-Hub-Signature-256: sha256=${sig}" \ + --data "$payload" \ + https://tle-meanjin-one-deploy-trigger.allosaurus-chromatic.ts.net/hooks/deploy -- 2.51.2