wangjia
824992fe6e
- nginx-jiu-ali.conf：443 ssl+http2 正式入口（HSTS/XFO/nosniff 安全头、 ACME webroot 续期通道、80→443 跳转）；8443 明文过渡口拆除 - 客户端构建 URL 全量回切 https://jiu.51yanmei.com（compile×5/local_test/ release-client/notify） - 流水线去 EC2：deploy-client/site 单轨 Ali、manual 回滚与每日备份切 ali、 seed/reset/debug-db 改容器内取密码（SEC-003，退役 DB_PASSWORD secret） Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JJ1g8XV1YhhmHRzhwWEW7o
37 lines
1.2 KiB
YAML
37 lines
1.2 KiB
YAML
name: DB Backup
|
|
|
|
on:
|
|
# 每日定时备份（北京时间 02:00）。手动触发亦可。
|
|
schedule:
|
|
- cron: '0 18 * * *' # UTC 18:00 = 北京时间 02:00
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: db-backup
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
backup:
|
|
runs-on: mac
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Dump MySQL to local backup dir
|
|
env:
|
|
# 2026-07-03 割接后备份源=阿里机主库
|
|
DEPLOY_SSH_KEY: ${{ secrets.ALI_SSH_KEY }}
|
|
DEPLOY_HOST: ${{ secrets.ALI_HOST }}
|
|
DEPLOY_USER: ${{ secrets.ALI_USER }}
|
|
run: sh scripts/ci/backup-db.sh
|
|
|
|
- name: Notify (Telegram)
|
|
if: always()
|
|
env:
|
|
TELEGRAM_TOKEN: ${{ secrets.TELEGRAM_TOKEN }}
|
|
TELEGRAM_CHAT_ID: ${{ secrets.TELEGRAM_CHAT_ID }}
|
|
run: |
|
|
if [ "${{ job.status }}" = "success" ]; then ICON="✅"; LABEL="数据库备份成功"; else ICON="❌"; LABEL="数据库备份失败"; fi
|
|
curl -f -X POST "https://api.telegram.org/bot${TELEGRAM_TOKEN}/sendMessage" \
|
|
-d "chat_id=${TELEGRAM_CHAT_ID}" \
|
|
--data-urlencode "text=${ICON} 岩美 ${LABEL}" > /dev/null || true
|