From b29b406e2a3ffb701d0f6dd96a64baea1943d4ca Mon Sep 17 00:00:00 2001 From: Anthony Ettinger Date: Fri, 25 Sep 2026 09:57:12 +0000 Subject: [PATCH] ops: deploy launch.anapp.now to dev2 on merge Railway deployed this on push; dev2 does not by itself. The workflow ssh's to the box and runs /home/anthony/www/launch.anapp.now/deploy-app.sh, which builds the image from this checkout and restarts the compose stack. Generated by cli-tools dev2/dev2-site scaffold. Co-Authored-By: Claude Fable 5.1 --- .github/workflows/deploy-dev2.yml | 60 +++++++++++++++++++ .nixpacks/Dockerfile | 35 +++++++++++ .nixpacks/build.sh | 1 + ...f9169c4ccce521379e602cc82ed873a1f1b52b.nix | 21 +++++++ 4 files changed, 117 insertions(+) create mode 100644 .github/workflows/deploy-dev2.yml create mode 100644 .nixpacks/Dockerfile create mode 100644 .nixpacks/build.sh create mode 100644 .nixpacks/nixpkgs-23f9169c4ccce521379e602cc82ed873a1f1b52b.nix diff --git a/.github/workflows/deploy-dev2.yml b/.github/workflows/deploy-dev2.yml new file mode 100644 index 0000000..c361cd0 --- /dev/null +++ b/.github/workflows/deploy-dev2.yml @@ -0,0 +1,60 @@ +# Ship every merge to dev2, where launch.anapp.now runs since it left Railway (which +# deployed on merge by itself). The box pulls the merged commit, rebuilds the +# image(s) from this repo and restarts the compose stack under +# /home/anthony/www/launch.anapp.now. Generated by cli-tools/dev2/dev2-site scaffold. +name: Deploy to dev2 + +on: + push: + branches: [main] + workflow_dispatch: + inputs: + ref: + description: Git ref to deploy (defaults to the pushed commit) + required: false + type: string + +concurrency: + group: deploy-dev2 + cancel-in-progress: false + +jobs: + deploy: + runs-on: ubuntu-latest + timeout-minutes: 45 + steps: + # ${{ }} values go through env, never straight into a run: body. + - name: Resolve target revision + id: rev + env: + REF: ${{ inputs.ref || github.sha }} + run: echo "sha=$REF" >> "$GITHUB_OUTPUT" + + - name: Set up ssh + env: + SSH_KEY: ${{ secrets.DEV2_SSH_KEY }} + KNOWN_HOSTS: ${{ secrets.DEV2_KNOWN_HOSTS }} + run: | + install -d -m 700 ~/.ssh + printf '%s\n' "$SSH_KEY" > ~/.ssh/id_ed25519 + chmod 600 ~/.ssh/id_ed25519 + printf '%s\n' "$KNOWN_HOSTS" > ~/.ssh/known_hosts + chmod 644 ~/.ssh/known_hosts + + - name: Deploy + env: + DEV2_USER: ${{ secrets.DEV2_USER }} + DEV2_HOST: ${{ secrets.DEV2_HOST }} + SHA: ${{ steps.rev.outputs.sha }} + run: | + ssh -o BatchMode=yes "$DEV2_USER@$DEV2_HOST" \ + /home/anthony/www/launch.anapp.now/deploy-app.sh "$SHA" + + - name: Verify the site answers + run: | + for i in $(seq 1 10); do + code=$(curl -s -o /dev/null -w '%{http_code}' "https://launch.anapp.now/healthz" || true) + case "$code" in 2*|3*|401|403) echo "launch.anapp.now $code"; exit 0;; esac + echo "attempt $i: $code"; sleep 10 + done + echo "launch.anapp.now never answered"; exit 1 diff --git a/.nixpacks/Dockerfile b/.nixpacks/Dockerfile new file mode 100644 index 0000000..d0304b2 --- /dev/null +++ b/.nixpacks/Dockerfile @@ -0,0 +1,35 @@ +FROM ghcr.io/railwayapp/nixpacks:ubuntu-1745885067 + +ENTRYPOINT ["/bin/bash", "-l", "-c"] +WORKDIR /app/ + + +COPY .nixpacks/nixpkgs-23f9169c4ccce521379e602cc82ed873a1f1b52b.nix .nixpacks/nixpkgs-23f9169c4ccce521379e602cc82ed873a1f1b52b.nix +RUN nix-env -if .nixpacks/nixpkgs-23f9169c4ccce521379e602cc82ed873a1f1b52b.nix && nix-collect-garbage -d + + +ARG CI NIXPACKS_METADATA NODE_ENV NPM_CONFIG_PRODUCTION +ENV CI=$CI NIXPACKS_METADATA=$NIXPACKS_METADATA NODE_ENV=$NODE_ENV NPM_CONFIG_PRODUCTION=$NPM_CONFIG_PRODUCTION + +# setup phase +# noop + +# install phase +ENV NIXPACKS_PATH=/app/node_modules/.bin:$NIXPACKS_PATH +COPY . /app/. +RUN --mount=type=cache,id=bk0YUPar8-/root/local/share/pnpm/store/v3,target=/root/.local/share/pnpm/store/v3 npm install -g corepack@0.24.1 && corepack enable +RUN --mount=type=cache,id=bk0YUPar8-/root/local/share/pnpm/store/v3,target=/root/.local/share/pnpm/store/v3 pnpm i --frozen-lockfile + +# build phase +COPY . /app/. +RUN --mount=type=cache,id=bk0YUPar8-next/cache,target=/app/.next/cache --mount=type=cache,id=bk0YUPar8-node_modules/cache,target=/app/node_modules/.cache pnpm run build + + +RUN printf '\nPATH=/app/node_modules/.bin:$PATH' >> /root/.profile + + +# start +COPY . /app + +CMD ["pnpm run start"] + diff --git a/.nixpacks/build.sh b/.nixpacks/build.sh new file mode 100644 index 0000000..39e8508 --- /dev/null +++ b/.nixpacks/build.sh @@ -0,0 +1 @@ +docker build /home/anthony/.claude/jobs/c41b501f/dev2-launch.anapp.now-rvbw41tm -f /home/anthony/.claude/jobs/c41b501f/dev2-launch.anapp.now-rvbw41tm/.nixpacks/Dockerfile -t ac6976a4-9620-4765-a2a9-52e44c0c7dd8 --build-arg CI=true --build-arg NIXPACKS_METADATA=node --build-arg NODE_ENV=production --build-arg NPM_CONFIG_PRODUCTION=false \ No newline at end of file diff --git a/.nixpacks/nixpkgs-23f9169c4ccce521379e602cc82ed873a1f1b52b.nix b/.nixpacks/nixpkgs-23f9169c4ccce521379e602cc82ed873a1f1b52b.nix new file mode 100644 index 0000000..5171836 --- /dev/null +++ b/.nixpacks/nixpkgs-23f9169c4ccce521379e602cc82ed873a1f1b52b.nix @@ -0,0 +1,21 @@ +{ }: + +let pkgs = import (fetchTarball "https://github.com/NixOS/nixpkgs/archive/23f9169c4ccce521379e602cc82ed873a1f1b52b.tar.gz") { overlays = [ (import (builtins.fetchTarball "https://github.com/railwayapp/nix-npm-overlay/archive/main.tar.gz")) ]; }; +in with pkgs; + let + APPEND_LIBRARY_PATH = "${lib.makeLibraryPath [ gcc-unwrapped ] }"; + myLibraries = writeText "libraries" '' + export LD_LIBRARY_PATH="${APPEND_LIBRARY_PATH}:$LD_LIBRARY_PATH" + + ''; + in + buildEnv { + name = "23f9169c4ccce521379e602cc82ed873a1f1b52b-env"; + paths = [ + (runCommand "23f9169c4ccce521379e602cc82ed873a1f1b52b-env" { } '' + mkdir -p $out/etc/profile.d + cp ${myLibraries} $out/etc/profile.d/23f9169c4ccce521379e602cc82ed873a1f1b52b-env.sh + '') + nodejs_24 pnpm-10_x + ]; + }