ci: 添加 Gitea CI/CD 工作流用于构建与部署

- 新增 .gitea/workflows/build-and-deploy.yml 文件，定义完整的 CI/CD 流程
- 工作流在 push 或手动触发时运行，负责打包代码、生成环境配置、传输至远程主机并部署
- 更新 docker-compose.yaml，添加项目名称配置以适配部署流程
- 部署流程包含安全检查、旧版本清理和滚动更新机制

.gitea/workflows/build-and-deploy.yml

@@ -0,0 +1,133 @@
+name: build-and-deploy
+
+on:
+  push:
+  workflow_dispatch:
+
+env:
+  REMOTE_APP_DIR: /data/projects/ulthon_admin/docker
+  PACKAGE_NAME: ulthon_admin_release.tar.gz
+  COMPOSE_PROJECT_NAME: ulthon_admin
+  DB_HOSTNAME: host.docker.internal
+
+jobs:
+  deploy_host15:
+    name: 直传代码并部署到 Host15
+    runs-on: main
+    container:
+      image: catthehacker/ubuntu:act-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: 生成 .env
+        shell: bash
+        env:
+          MYSQL_PASSWORD: ${{ secrets.MYSQL_PASSWORD }}
+          DB_HOSTNAME: ${{ env.DB_HOSTNAME }}
+        run: |
+          set -euo pipefail
+          cp .example.env .env
+
+          awk -v host="$DB_HOSTNAME" -v newpwd="$MYSQL_PASSWORD" '
+          BEGIN { has_host = 0; has_pwd = 0 }
+          $0 ~ /^HOSTNAME=/ {
+              print "HOSTNAME=" host
+              has_host = 1
+              next
+          }
+          $0 ~ /^PASSWORD=/ {
+              print "PASSWORD=" newpwd
+              has_pwd = 1
+              next
+          }
+          { print }
+          END {
+              if (!has_host) print "HOSTNAME=" host
+              if (!has_pwd) print "PASSWORD=" newpwd
+          }' .env > .env.tmp
+
+          mv .env.tmp .env
+
+      - name: 打包发布文件
+        shell: bash
+        env:
+          PACKAGE_NAME: ${{ env.PACKAGE_NAME }}
+        run: |
+          set -euo pipefail
+          tar -czf "$PACKAGE_NAME" \
+            --exclude-vcs \
+            --exclude="./runtime/*" \
+            --exclude="./.trae/*" \
+            --exclude="./source/clients/uniapp/node_modules/*" \
+            .
+
+      - name: 创建远端目录
+        uses: appleboy/ssh-action@v0.1.10
+        env:
+          REMOTE_APP_DIR: ${{ env.REMOTE_APP_DIR }}
+        with:
+          host: ${{ secrets.UL_HOST15_IP }}
+          username: ${{ secrets.UL_HOST15_USER }}
+          password: ${{ secrets.UL_HOST15_PASSWORD }}
+          port: ${{ secrets.UL_HOST15_PORT }}
+          envs: REMOTE_APP_DIR
+          script: |
+            set -euo pipefail
+            mkdir -p "${REMOTE_APP_DIR}/incoming"
+            mkdir -p "${REMOTE_APP_DIR}/releases"
+
+      - name: 上传发布包与 compose
+        uses: appleboy/scp-action@v0.1.7
+        env:
+          REMOTE_APP_DIR: ${{ env.REMOTE_APP_DIR }}
+          PACKAGE_NAME: ${{ env.PACKAGE_NAME }}
+        with:
+          host: ${{ secrets.UL_HOST15_IP }}
+          username: ${{ secrets.UL_HOST15_USER }}
+          password: ${{ secrets.UL_HOST15_PASSWORD }}
+          port: ${{ secrets.UL_HOST15_PORT }}
+          source: "${{ env.PACKAGE_NAME }},docker-compose.yaml"
+          target: "${{ env.REMOTE_APP_DIR }}/incoming"
+          overwrite: true
+
+      - name: 远端解压并启动
+        uses: appleboy/ssh-action@v0.1.10
+        env:
+          REMOTE_APP_DIR: ${{ env.REMOTE_APP_DIR }}
+          PACKAGE_NAME: ${{ env.PACKAGE_NAME }}
+          COMPOSE_PROJECT_NAME: ${{ env.COMPOSE_PROJECT_NAME }}
+          GITHUB_RUN_ID: ${{ github.run_id }}
+        with:
+          host: ${{ secrets.UL_HOST15_IP }}
+          username: ${{ secrets.UL_HOST15_USER }}
+          password: ${{ secrets.UL_HOST15_PASSWORD }}
+          port: ${{ secrets.UL_HOST15_PORT }}
+          envs: REMOTE_APP_DIR,PACKAGE_NAME,COMPOSE_PROJECT_NAME,GITHUB_RUN_ID
+          script: |
+            set -euo pipefail
+
+            RELEASE_DIR="${REMOTE_APP_DIR}/releases/${GITHUB_RUN_ID}"
+            PACKAGE_PATH="${REMOTE_APP_DIR}/incoming/${PACKAGE_NAME}"
+            COMPOSE_PATH="${REMOTE_APP_DIR}/incoming/docker-compose.yaml"
+
+            rm -rf "${RELEASE_DIR}"
+            mkdir -p "${RELEASE_DIR}"
+
+            tar -xzf "${PACKAGE_PATH}" -C "${RELEASE_DIR}"
+
+            if [ -f "${COMPOSE_PATH}" ]; then
+              cp -f "${COMPOSE_PATH}" "${RELEASE_DIR}/docker-compose.yaml"
+            fi
+
+            cd "${RELEASE_DIR}"
+            export COMPOSE_PROJECT_NAME
+
+            docker compose down || true
+            docker compose up -d --build --remove-orphans
+
+            ln -sfn "${RELEASE_DIR}" "${REMOTE_APP_DIR}/current"
+
+            ls -1dt "${REMOTE_APP_DIR}/releases"/* 2>/dev/null | tail -n +6 | xargs -r rm -rf

docker-compose.yaml

@@ -1,3 +1,7 @@
+
+name: ulthon_admin
+
+
 services:
     ulthon_admin:
         # 正式环境中，您应当构建一个完整镜像，使用镜像名称或id运行，不要使用dockerfile