From a5cf780a65f0c2ded15d16bb6044f1e90c14b2e1 Mon Sep 17 00:00:00 2001
From: asepharyana <superaseph@gmail.com>
Date: Wed, 8 Jul 2026 01:36:51 +0700
Subject: [PATCH] ci: add gitea deploy workflow

---
 .gitea/workflows/deploy.yml | 95 +++++++++++++++++++++++++++++++++++++
 1 file changed, 95 insertions(+)
 create mode 100644 .gitea/workflows/deploy.yml

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
new file mode 100644
index 0000000..3b85898
--- /dev/null
+++ b/.gitea/workflows/deploy.yml
@@ -0,0 +1,95 @@
+name: Deploy to VPS
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+
+      - name: Install system dependencies
+        run: |
+          if command -v sudo >/dev/null 2>&1; then
+            sudo apt-get update
+            sudo apt-get install -y --no-install-recommends \
+              build-essential \
+              ca-certificates \
+              curl \
+              libssl-dev \
+              pkg-config \
+              python3
+          else
+            apt-get update
+            apt-get install -y --no-install-recommends \
+              build-essential \
+              ca-certificates \
+              curl \
+              libssl-dev \
+              pkg-config \
+              python3
+          fi
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Set up pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 11.1.3
+          run_install: false
+
+      - name: Set up Rust
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: wasm32-unknown-unknown
+
+      - name: Install Trunk
+        run: cargo install trunk --version 0.22.0-beta.1 --locked
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Lint
+        run: pnpm run lint
+
+      - name: Build backend
+        run: pnpm run build:backend
+
+      - name: Build discord gateway
+        run: pnpm run build:discord-gateway
+
+      - name: Build frontend
+        run: pnpm run build:web
+
+      - name: Prepare production environment file
+        env:
+          PRODUCTION_ENV: ${{ secrets.PRODUCTION_ENV }}
+        run: |
+          umask 077
+          printf '%s\n' "$PRODUCTION_ENV" | tr -d '\r' > .env
+          chmod 600 .env
+
+      - name: Prepare SSH key
+        env:
+          VPS_SSH_KEY_CONTENT: ${{ secrets.VPS_SSH_KEY }}
+        run: |
+          umask 077
+          key_file="${RUNNER_TEMP:-/tmp}/bete-vps-key"
+          printf '%s\n' "$VPS_SSH_KEY_CONTENT" > "$key_file"
+          chmod 600 "$key_file"
+          echo "VPS_SSH_KEY=$key_file" >> "$GITHUB_ENV"
+
+      - name: Deploy
+        env:
+          VPS_HOST: ${{ secrets.VPS_HOST }}
+          VPS_USER: ${{ secrets.VPS_USER }}
+        run: ./deploy.sh --no-build