使用Github Action自动化打包构建部署Go程序

# 使用官方的 Golang 镜像创建构建产物。
FROM golang:1.21.6 AS builder

RUN mkdir /app
# 将本地代码复制到容器镜像中。
WORKDIR /app
COPY . .

# 在容器内构建命令。
RUN go mod download && \
    CGO_ENABLED=0 GOOS=linux go build -o dbdemo .

# 使用一个新的阶段创建一个最小的镜像。
FROM alpine:3.20
COPY ./conf /conf
COPY --from=builder /app/dbdemo /usr/local/bin/dbdemo
# 更新文件权限以确保它是可执行的。
RUN chmod +x /usr/local/bin/dbdemo
# 设置容器的默认端口
EXPOSE 3000

# 设置容器的默认命令。
CMD ["/usr/local/bin/dbdemo"]

name: CI	#名字随意

on:
  push:
    branches:
      - main # 触发工作流的分支

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Build Docker image	#打包镜像
        run: |
          docker build -t username/dbdemo:${{ github.sha }} .
          docker tag username/dbdemo:${{ github.sha }} username/dbdemo:latest          

      - name: Login to Docker Hub	#登录Docker Hub
        uses: docker/login-action@v1
        with:
          username: ${{ secrets.DOCKER_HUB_USERNAME }}
          password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}

      - name: Push Docker image to Docker Hub	#推送到Docker Hub
        run: |
          docker push username/dbdemo:latest
          docker push username/dbdemo:${{ github.sha }}          

      - name: Deploy to server	#部署到服务器
        uses: appleboy/ssh-action@v0.1.3
        with:
          host: ${{ secrets.SERVER_HOST }}
          username: ${{ secrets.SERVER_USERNAME }}
          password: ${{ secrets.SERVER_PASSWORD }}
          port: ${{ secrets.SERVER_PORT }}
          script: |
            docker pull username/dbdemo:${{ github.sha }}
            docker stop dbdemo || true  
            docker rm dbdemo || true   
            docker run -d --name dbdemo -p 3000:3000 username/dbdemo:${{ github.sha }}            

location /api {
    proxy_pass http://127.0.0.1:3000; 
    proxy_set_header Host $host; 
    proxy_set_header X-Real-IP $remote_addr; 
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
    proxy_set_header REMOTE-HOST $remote_addr; 
    proxy_set_header Upgrade $http_upgrade; 
    proxy_set_header Connection "upgrade"; 
    proxy_set_header X-Forwarded-Proto $scheme; 
    proxy_http_version 1.1; 
    add_header X-Cache $upstream_cache_status; 
    add_header Strict-Transport-Security "max-age=31536000"; 
    add_header Cache-Control no-cache; 
}

func Cors() gin.HandlerFunc {
	return cors.New(cors.Config{
		//AllowOrigins:  []string{"*"},
		AllowAllOrigins: true,
		AllowMethods:    []string{"PUT", "PATCH", "GET", "POST", "DELETE", "OPTIONS"},
		AllowHeaders:    []string{"Origin", "Content-Type"},
		ExposeHeaders:   []string{"Content-Length", "Authorization"},
		MaxAge:          12 * time.Hour,
	})
}