 wangjia
|
824992fe6e
|
devops: 备案通过回切 https 域名 + 流水线 Ali 单轨
- nginx-jiu-ali.conf：443 ssl+http2 正式入口（HSTS/XFO/nosniff 安全头、
ACME webroot 续期通道、80→443 跳转）；8443 明文过渡口拆除
- 客户端构建 URL 全量回切 https://jiu.51yanmei.com（compile×5/local_test/
release-client/notify）
- 流水线去 EC2：deploy-client/site 单轨 Ali、manual 回滚与每日备份切 ali、
seed/reset/debug-db 改容器内取密码（SEC-003，退役 DB_PASSWORD secret）
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JJ1g8XV1YhhmHRzhwWEW7o
|
2026-07-03 09:58:30 +08:00 |
|
|
wangjia
|
b42a70ff3b
|
ci: 修复数据库备份 workflow——改用 mac runner、EC2 端读密码、本机落盘、每日定时
backup.yml 原 runs-on ubuntu-latest 无对应 runner、落盘 NAS 路径在 mac runner 不存在，长期跑不起来。
改为 runs-on mac + scripts/ci/backup-db.sh：复用 lib-forgejo 的 ssh 封装连 EC2，
在 EC2 端从 production.env 读 DSN 密码 mysqldump（零额外 secret），流回本机 ~/jiu-db-backups
gzip 落盘、保留 30 天、完整性校验，恢复每日 02:00 定时 + Telegram 成败通知。
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YZ4DskSRKsSiheQonFtQvx
|
2026-06-21 11:39:28 +08:00 |
|
|
wangjia
|
b43601b4fd
|
ci: 运行环境自愈预置 + 发版任务串行 + 删 ci.yml/暂停备份
Deploy / build-windows (push) Failing after 25s
Deploy / build-macos (push) Has been cancelled
Deploy / release-deploy (push) Has been cancelled
Deploy / build-linux-web (push) Has been cancelled
- 新增 scripts/ci/provision-{mac,windows}.sh：幂等预置，按 Flutter 版本
stamp 短路，pipeline 首跑自动 precache + 预热缓存，运行时不再下载 engine
- scripts/ci/_env.sh：抽出共用镜像 env，compile 脚本统一 source
- deploy.yml：build-macos needs build-linux-web，同一 mac runner 串行
执行，避免排队超时；各 build job 加 Provision 前置步骤
- 删除 .gitea/workflows/ci.yml
- backup.yml：暂停定时备份（保留 workflow_dispatch 手动触发）
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-03 01:04:23 +08:00 |
|
|
wangjia
|
7c90661d1a
|
fix(ci): 修复备份路径和 SSH key 换行问题
Deploy / deploy (push) Failing after 1m5s
|
2026-05-08 02:03:27 +08:00 |
|
|
wangjia
|
21088fc908
|
feat(deploy): 新增 Forgejo NAS 自托管 Git + CI/CD 配置
Deploy / deploy (push) Has been cancelled
- deploy/runner/docker-compose.forgejo.yml：Forgejo + act_runner，ROOT_URL 参数化
- .gitea/workflows/ci.yml：非 main 分支测试
- .gitea/workflows/deploy.yml：main 推送自动构建、创建 Forgejo Release、部署到 EC2
- .gitea/workflows/backup.yml：每日 02:00 备份 MySQL 到 NAS /volume1/backups
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-04-30 22:09:00 +08:00 |
|