feat(deploy): 新增 Forgejo NAS 自托管 Git + CI/CD 配置

- deploy/runner/docker-compose.forgejo.yml：Forgejo + act_runner，ROOT_URL 参数化 - .gitea/workflows/ci.yml：非 main 分支测试 - .gitea/workflows/deploy.yml：main 推送自动构建、创建 Forgejo Release、部署到 EC2 - .gitea/workflows/backup.yml：每日 02:00 备份 MySQL 到 NAS /volume1/backups Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-30 22:09:00 +08:00
parent 50b139c97a
commit 21088fc908
4 changed files with 219 additions and 0 deletions
@@ -0,0 +1,36 @@
+name: DB Backup
+
+on:
+  schedule:
+    - cron: '0 18 * * *'  # UTC 18:00 = 北京时间 02:00
+  workflow_dispatch:
+
+jobs:
+  backup:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Setup SSH
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.EC2_SSH_KEY }}" > ~/.ssh/ec2.pem
+          chmod 600 ~/.ssh/ec2.pem
+          ssh-keyscan -H ${{ secrets.EC2_HOST }} >> ~/.ssh/known_hosts
+
+      - name: Dump MySQL to NAS
+        env:
+          EC2_HOST: ${{ secrets.EC2_HOST }}
+          EC2_USER: ${{ secrets.EC2_USER }}
+          DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
+        run: |
+          BACKUP_DIR=/volume1/backups/jiu-db
+          mkdir -p $BACKUP_DIR
+          FILENAME="jiu_db_$(date +%Y%m%d_%H%M%S).sql.gz"
+          ssh -i ~/.ssh/ec2.pem ${EC2_USER}@${EC2_HOST} \
+            "docker exec jiu_mysql mysqldump -uroot -p${DB_PASSWORD} jiu_db" \
+            | gzip > ${BACKUP_DIR}/${FILENAME}
+          find $BACKUP_DIR -name "*.sql.gz" -mtime +30 -delete
+          echo "Saved: ${BACKUP_DIR}/${FILENAME}"
+
+      - name: Cleanup SSH key
+        if: always()
+        run: rm -f ~/.ssh/ec2.pem