Create build-and-deploy.yml

Author: downpatch

.github/workflows/build-and-deploy.yml

@@ -0,0 +1,58 @@
+name: Deploy downpatch.com
+
+on:
+  push:
+    branches: ["main"]
+  workflow_dispatch: {}
+
+concurrency:
+  group: downpatch-deploy
+  cancel-in-progress: true
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: "10.0.x"
+
+      - name: Restore
+        run: dotnet restore ./downpatch.csproj
+
+      - name: Publish
+        run: dotnet publish ./downpatch.csproj -c Release -o ./out --no-restore
+
+      - name: Configure SSH
+        shell: bash
+        run: |
+          set -euo pipefail
+          mkdir -p ~/.ssh
+          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+          ssh-keyscan -p "${{ secrets.SSH_PORT }}" "${{ secrets.SSH_HOST }}" >> ~/.ssh/known_hosts
+
+      - name: Upload release via rsync
+        shell: bash
+        run: |
+          set -euo pipefail
+          RELEASE="${{ github.sha }}"
+          rsync -az --delete \
+            -e "ssh -p ${{ secrets.SSH_PORT }} -i ~/.ssh/id_ed25519" \
+            ./out/ "${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}:/var/www/downpatch/releases/${RELEASE}/"
+
+      - name: Activate release + restart service
+        shell: bash
+        run: |
+          set -euo pipefail
+          RELEASE="${{ github.sha }}"
+          ssh -p "${{ secrets.SSH_PORT }}" -i ~/.ssh/id_ed25519 "${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}" bash -lc " \
+            set -euo pipefail; \
+            ln -sfn /var/www/downpatch/releases/${RELEASE} /var/www/downpatch/current; \
+            sudo /bin/systemctl restart downpatch.service; \
+            sudo /bin/systemctl status downpatch.service --no-pager \
+          "