ci: replace deployment workflow with tests and builds

.gitea/workflows/ci.yml

@@ -0,0 +1,64 @@
+name: Test and build
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    branches:
+      - master
+
+env:
+  GOLANGCI_LINT_VERSION: v2.12.2
+
+permissions:
+  contents: read
+
+jobs:
+  test-build:
+    name: Test and build
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v7
+
+      - name: Setup Go
+        uses: actions/setup-go@v7
+        with:
+          go-version-file: go.mod
+          cache: true
+          cache-dependency-path: |
+            go.mod
+            go.sum
+
+      - name: Print Go version
+        run: go version
+
+      - name: Download modules
+        run: go mod download
+
+      - name: Test
+        run: go test ./...
+
+      - name: Vet
+        run: go vet ./...
+
+      - name: Lint
+        uses: golangci/golangci-lint-action@v9
+        with:
+          version: ${{ env.GOLANGCI_LINT_VERSION }}
+
+      - name: Build linux/amd64 binaries
+        env:
+          CGO_ENABLED: "0"
+          GOOS: linux
+          GOARCH: amd64
+        run: |
+          set -Eeuo pipefail
+          mkdir -p out/bin
+          go build -trimpath -buildvcs=false -ldflags="-s -w" -o out/bin/overnight-trading-bot ./cmd/bot
+          go build -trimpath -buildvcs=false -ldflags="-s -w" -o out/bin/overnight-trading-bot-migrate ./cmd/migrate
+          go build -trimpath -buildvcs=false -ldflags="-s -w" -o out/bin/overnight-trading-bot-backtest ./cmd/backtest
+          go build -trimpath -buildvcs=false -ldflags="-s -w" -o out/bin/overnight-trading-bot-mode-days ./cmd/mode-days

.gitea/workflows/deploy.yml

@@ -1,189 +0,0 @@
-name: Deploy
-
-on:
-  push:
-    branches:
-      - master
-
-jobs:
-  deploy:
-    name: Test, build and deploy
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
-
-    env:
-      DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
-      RELEASE_SHA: ${{ github.sha }}
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v7
-
-      - name: Setup Go
-        uses: actions/setup-go@v7
-        with:
-          go-version-file: go.mod
-          cache: true
-
-      - name: Print Go version
-        run: go version
-
-      - name: Download modules
-        run: go mod download
-
-      - name: Vet
-        run: go vet ./...
-
-      - name: Install golangci-lint
-        run: |
-          set -Eeuo pipefail
-          bin_dir="$(go env GOPATH)/bin"
-          install -d "$bin_dir"
-          curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/HEAD/install.sh \
-            | sh -s -- -b "$bin_dir" latest
-          echo "$bin_dir" >> "$GITHUB_PATH"
-
-      - name: Lint
-        run: golangci-lint run ./...
-
-      - name: Test
-        run: go test ./...
-
-      - name: Build linux/amd64 binaries
-        env:
-          CGO_ENABLED: "0"
-          GOOS: linux
-          GOARCH: amd64
-        run: |
-          set -Eeuo pipefail
-          mkdir -p out/release/bin out/release/systemd
-          go build -trimpath -ldflags="-s -w" -o out/release/bin/overnight-trading-bot ./cmd/bot
-          go build -trimpath -ldflags="-s -w" -o out/release/bin/overnight-trading-bot-migrate ./cmd/migrate
-          go build -trimpath -ldflags="-s -w" -o out/release/bin/overnight-trading-bot-backtest ./cmd/backtest
-          cp deploy/systemd/overnight-trading-bot.service out/release/systemd/
-          file out/release/bin/overnight-trading-bot
-
-      - name: Pack release archive
-        run: |
-          set -Eeuo pipefail
-          tar -C out/release -czf out/release.tar.gz .
-
-      - name: Validate inputs and configure SSH
-        env:
-          DEPLOY_SSH_PRIVATE_KEY_BASE64: ${{ secrets.DEPLOY_SSH_PRIVATE_KEY_BASE64 }}
-        run: |
-          set -Eeuo pipefail
-
-          if [ -z "${DEPLOY_HOST:-}" ]; then
-            echo "secrets.DEPLOY_HOST is required." >&2
-            exit 1
-          fi
-          if [ -z "${DEPLOY_SSH_PRIVATE_KEY_BASE64:-}" ]; then
-            echo "secrets.DEPLOY_SSH_PRIVATE_KEY_BASE64 is required." >&2
-            exit 1
-          fi
-
-          install -m 700 -d ~/.ssh
-          printf '%s' "$DEPLOY_SSH_PRIVATE_KEY_BASE64" | base64 -d > ~/.ssh/deploy_key
-          chmod 600 ~/.ssh/deploy_key
-          ssh-keyscan -p 22 -H "$DEPLOY_HOST" >> ~/.ssh/known_hosts
-
-      - name: Upload archive
-        run: |
-          set -Eeuo pipefail
-          ssh \
-            -i ~/.ssh/deploy_key \
-            -o BatchMode=yes \
-            -o IdentitiesOnly=yes \
-            -o StrictHostKeyChecking=yes \
-            -p 22 \
-            root@"$DEPLOY_HOST" \
-            "install -d -m 0755 /var/tmp/overnight-trading-bot-deploy"
-          scp \
-            -i ~/.ssh/deploy_key \
-            -o BatchMode=yes \
-            -o IdentitiesOnly=yes \
-            -o StrictHostKeyChecking=yes \
-            -P 22 \
-            out/release.tar.gz \
-            root@"$DEPLOY_HOST":/var/tmp/overnight-trading-bot-deploy/release.tar.gz
-
-      - name: Install release and restart service
-        run: |
-          set -Eeuo pipefail
-          ssh \
-            -i ~/.ssh/deploy_key \
-            -o BatchMode=yes \
-            -o IdentitiesOnly=yes \
-            -o StrictHostKeyChecking=yes \
-            -p 22 \
-            root@"$DEPLOY_HOST" \
-            "RELEASE_SHA='$RELEASE_SHA' bash -se" <<'REMOTE'
-          set -Eeuo pipefail
-
-          for cmd in systemctl tar install useradd journalctl; do
-            if ! command -v "$cmd" >/dev/null 2>&1; then
-              echo "$cmd is not installed on the server." >&2
-              exit 1
-            fi
-          done
-
-          env_file=/etc/overnight-trading-bot/overnight-trading-bot.env
-          if [ ! -f "$env_file" ]; then
-            echo "Missing $env_file. Create it before running deploy (see README)." >&2
-            exit 1
-          fi
-
-          if ! id -u overnight-bot >/dev/null 2>&1; then
-            useradd --system --no-create-home --home-dir /nonexistent \
-              --shell /usr/sbin/nologin overnight-bot
-          fi
-
-          chgrp overnight-bot "$env_file"
-          chmod 0640 "$env_file"
-
-          stage_dir=/var/tmp/overnight-trading-bot-deploy/stage
-          rm -rf "$stage_dir"
-          install -d -m 0755 "$stage_dir"
-          tar -xzf /var/tmp/overnight-trading-bot-deploy/release.tar.gz -C "$stage_dir"
-          rm -f /var/tmp/overnight-trading-bot-deploy/release.tar.gz
-
-          for bin in overnight-trading-bot overnight-trading-bot-migrate overnight-trading-bot-backtest; do
-            install -m 0755 "$stage_dir/bin/$bin" "/usr/local/bin/$bin.new"
-            mv -f "/usr/local/bin/$bin.new" "/usr/local/bin/$bin"
-          done
-
-          install -m 0644 "$stage_dir/systemd/overnight-trading-bot.service" \
-            /etc/systemd/system/overnight-trading-bot.service
-
-          rm -rf "$stage_dir"
-
-          systemctl daemon-reload
-          systemctl enable overnight-trading-bot.service
-          systemctl restart overnight-trading-bot.service
-
-          for _ in $(seq 1 30); do
-            if systemctl is-active --quiet overnight-trading-bot.service; then
-              break
-            fi
-            sleep 2
-          done
-
-          if ! systemctl is-active --quiet overnight-trading-bot.service; then
-            echo "Service failed to become active after restart." >&2
-            journalctl -u overnight-trading-bot.service -n 100 --no-pager >&2 || true
-            exit 1
-          fi
-
-          for _ in $(seq 1 15); do
-            if /usr/local/bin/overnight-trading-bot -healthcheck >/dev/null 2>&1; then
-              echo "Health endpoint responding."
-              exit 0
-            fi
-            sleep 2
-          done
-
-          echo "Health endpoint did not respond after restart." >&2
-          journalctl -u overnight-trading-bot.service -n 100 --no-pager >&2 || true
-          exit 1
-          REMOTE

README.ru.md

@@ -230,7 +230,7 @@ TRUR,2024-01-09,100,101,99,100.5,10000,10,0.01
 
 ## Deploy
 
-`.gitea/workflows/deploy.yml` собирает статический бинарь и кладёт его на сервер. Никакого Docker/Podman ни в CI, ни на сервере не используется — служба запускается напрямую через `systemd` внутри LXC-контейнера. БД (MariaDB/MySQL) живёт на отдельном хосте и подключается через `DB_DSN`.
+`.gitea/workflows/ci.yml` собирает статический бинарь и кладёт его на сервер. Никакого Docker/Podman ни в CI, ни на сервере не используется — служба запускается напрямую через `systemd` внутри LXC-контейнера. БД (MariaDB/MySQL) живёт на отдельном хосте и подключается через `DB_DSN`.
 
 Pipeline на push в `master` (один job `deploy`):