feat(ops): replace Cloudflare Pages with Workers for frontend hosting
This commit is contained in:
1 parent
9ac1a8b79d
commit
9e56ff7859
16 files changed
+214
-283
No files matched your search
+23
-22
@@ -14,6 +14,7 @@
|
||||
- [Target Topology](#target-topology)
|
||||
- [Prerequisites](#prerequisites)
|
||||
- [Environment File](#environment-file)
|
||||
- [Gitea Secrets](#gitea-secrets)
|
||||
- [Pull-and-Run Deployment](#pull-and-run-deployment)
|
||||
- [First-Time or Recovery Provisioning](#first-time-or-recovery-provisioning)
|
||||
- [Health Verification](#health-verification)
|
||||
@@ -93,12 +94,12 @@ Readiness is not complete until the checklist above and the manual evidence trac
|
||||
|
||||
Three Gitea Actions workflows drive the full pipeline:
|
||||
|
||||
| Workflow | Trigger | Purpose |
|
||||
| ------------------ | ---------------- | ---------------------------------------------------------------------------------------- |
|
||||
| `ci.yml` | Push to `main` | Lint, build frontend, vet Go, build & push Docker images (`:latest`, `:main`) |
|
||||
| `cd.yml` | Push to `main` | Deploy to test lab (`192.168.88.40:2375`) — runs **in parallel** with CI |
|
||||
| `release.yml` | Tag push `*.*.*` | Build & push versioned Docker images (`:X.Y.Z`, `:X.Y`, `:latest`), create Gitea Release |
|
||||
| `pages-deploy.yml` | Push to `main` | Deploy frontend to Cloudflare Pages (see `docs/operations/gitea-cloudflare-pages.md`) |
|
||||
| Workflow | Trigger | Purpose |
|
||||
| -------------------- | ----------------- | ----------------------------------------------------------------------------------------- |
|
||||
| `ci.yml` | Push to `main` | Lint, build frontend, vet Go, build & push Docker images (`:latest`, `:main`) |
|
||||
| `cd.yml` | Push to `main` | Deploy to test lab (`192.168.88.40:2375`) — runs **in parallel** with CI |
|
||||
| `release.yml` | Tag push `*.*.*` | Build & push versioned Docker images (`:X.Y.Z`, `:X.Y`, `:latest`), create Gitea Release |
|
||||
| `workers-deploy.yml` | After CI succeeds | Deploy frontend to Cloudflare Workers (see `docs/operations/gitea-cloudflare-workers.md`) |
|
||||
|
||||
CI and CD run simultaneously on every push to `main`. The deploy pulls whatever `:latest` images are available in the registry at that moment.
|
||||
|
||||
@@ -146,7 +147,7 @@ Use `.env` with at least:
|
||||
- `R2_ENDPOINT` — S3-compatible endpoint URL
|
||||
- `R2_REGION` — set to `auto`
|
||||
|
||||
**Cloudflare (optional, for Workers/Pages):**
|
||||
**Cloudflare (optional, for Workers):**
|
||||
|
||||
- `CLOUDFLARE_API_TOKEN` / `CLOUDFLARE_ACCOUNT_ID`
|
||||
- `MEDIA_DOMAIN` — split media domain (e.g. `media.linearvoid.tv`)
|
||||
@@ -157,22 +158,22 @@ See `.env.example` and `SETUP.md` for full variable reference.
|
||||
|
||||
The CD workflow (`cd.yml`) injects sensitive values from Gitea secrets into the `.env` file at deploy time. The following secrets must be configured in the Gitea repository:
|
||||
|
||||
| Secret Name | Description |
|
||||
| ------------------------- | ------------------------------------ |
|
||||
| `DATABASE_URL` | PostgreSQL connection string |
|
||||
| `ADMIN_USERNAME` | Admin dashboard username |
|
||||
| `ADMIN_PASSWORD` | Admin dashboard password |
|
||||
| `R2_ACCESS_KEY_ID` | Cloudflare R2 access key |
|
||||
| `R2_SECRET_ACCESS_KEY` | Cloudflare R2 secret key |
|
||||
| `R2_BUCKET_NAME` | R2 bucket name |
|
||||
| `R2_ENDPOINT` | R2 S3-compatible endpoint URL |
|
||||
| `R2_ADMIN_ACCESS_KEY_ID` | R2 admin access key (optional) |
|
||||
| Secret Name | Description |
|
||||
| ---------------------------- | --------------------------------- |
|
||||
| `DATABASE_URL` | PostgreSQL connection string |
|
||||
| `ADMIN_USERNAME` | Admin dashboard username |
|
||||
| `ADMIN_PASSWORD` | Admin dashboard password |
|
||||
| `R2_ACCESS_KEY_ID` | Cloudflare R2 access key |
|
||||
| `R2_SECRET_ACCESS_KEY` | Cloudflare R2 secret key |
|
||||
| `R2_BUCKET_NAME` | R2 bucket name |
|
||||
| `R2_ENDPOINT` | R2 S3-compatible endpoint URL |
|
||||
| `R2_ADMIN_ACCESS_KEY_ID` | R2 admin access key (optional) |
|
||||
| `R2_ADMIN_SECRET_ACCESS_KEY` | R2 admin secret key (optional) |
|
||||
| `R2_ADMIN_ENDPOINT` | R2 admin endpoint (optional) |
|
||||
| `CLOUDFLARE_API_TOKEN` | Cloudflare API token (optional) |
|
||||
| `CLOUDFLARE_ACCOUNT_ID` | Cloudflare account ID (optional) |
|
||||
| `CI_REGISTRY_USER` | Gitea container registry username |
|
||||
| `CI_REGISTRY_TOKEN` | Gitea container registry token |
|
||||
| `R2_ADMIN_ENDPOINT` | R2 admin endpoint (optional) |
|
||||
| `CLOUDFLARE_API_TOKEN` | Cloudflare API token (optional) |
|
||||
| `CLOUDFLARE_ACCOUNT_ID` | Cloudflare account ID (optional) |
|
||||
| `CI_REGISTRY_USER` | Gitea container registry username |
|
||||
| `CI_REGISTRY_TOKEN` | Gitea container registry token |
|
||||
|
||||
## Pull-and-Run Deployment
|
||||
|
||||
|
||||
Reference in new issue
Block a user