Bump cryptography from 42.0.4 to 43.0.1 #82
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Run Improved Intra Server | |
| on: | |
| push: | |
| branches: [ main, github-actions ] | |
| pull_request: | |
| branches: [ '*' ] | |
| workflow_call: | |
| workflow_dispatch: | |
| jobs: | |
| run: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Link /opt/improved_intra_server to the repository | |
| run: | | |
| ln -s $GITHUB_WORKSPACE /opt/improved_intra_server | |
| - name: Update and install system dependencies | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y \ | |
| nginx \ | |
| openssl \ | |
| dos2unix | |
| - name: Install PostgreSQL dependencies | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y \ | |
| wget \ | |
| lsb-release \ | |
| gnupg2 | |
| - name: Add PostgreSQL repository | |
| run: | | |
| sudo sh -c 'echo "deb http://apt.postgresql.org/pub/repos/apt $(lsb_release -cs)-pgdg main" > /etc/apt/sources.list.d/pgdg.list' | |
| wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | sudo apt-key add - | |
| - name: Install PostgresQL | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y \ | |
| postgresql | |
| - name: Start PostgreSQL | |
| run: | | |
| sudo service postgresql start | |
| - name: Set up PostgreSQL | |
| run: | | |
| sudo -u postgres psql -c "ALTER USER postgres PASSWORD 'postgres';" | |
| sudo -u postgres psql -c "CREATE DATABASE \"iintra\" WITH OWNER \"postgres\" ENCODING 'UTF8';" | |
| - name: Install Python3 | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y \ | |
| python3 \ | |
| python3-pip \ | |
| python3-dev \ | |
| python-setuptools \ | |
| libpq-dev \ | |
| python3-virtualenv \ | |
| virtualenv | |
| - name: Initialize the virtual environment | |
| working-directory: /opt/improved_intra_server | |
| run: | | |
| virtualenv -p python3 .venv | |
| - name: Install Python dependencies | |
| working-directory: /opt/improved_intra_server | |
| run: | | |
| source .venv/bin/activate | |
| .venv/bin/pip install -r requirements.txt | |
| - name: Set up nginx as reverse-proxy | |
| working-directory: /opt/improved_intra_server | |
| run: | | |
| sudo cp ./useful/*.nginx.snippet.conf /etc/nginx/snippets/ | |
| sudo rm -f /etc/nginx/sites-enabled/default | |
| sudo mkdir -p /etc/nginx/ssl | |
| sudo openssl req -newkey rsa:2048 -x509 -days 365 -nodes \ | |
| -keyout /etc/nginx/ssl/server.key -out /etc/nginx/ssl/server.pem \ | |
| -subj "/C=NL/ST=North-Holland/L=Amsterdam/O=ImprovedIntra/CN=iintra.freekb.es/" | |
| sudo cp ./useful/nginx.example.ssl.conf /etc/nginx/sites-available/iintra.freekb.es.conf | |
| sudo ln -s /etc/nginx/sites-available/iintra.freekb.es.conf /etc/nginx/sites-enabled/iintra.freekb.es.conf | |
| - name: Test nginx configuration | |
| run: | | |
| cat /etc/nginx/sites-available/iintra.freekb.es.conf | |
| cat /etc/nginx/snippets/*.nginx.snippet.conf | |
| sudo nginx -t | |
| - name: Restart nginx | |
| run: | | |
| sudo /etc/init.d/nginx restart | |
| - name: Install testing dependencies | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y \ | |
| curl \ | |
| net-tools \ | |
| netcat | |
| - name: Prepare for Improved Intra server start | |
| working-directory: /opt/improved_intra_server | |
| run: | | |
| dos2unix /opt/improved_intra_server/gunicorn.sh | |
| mkdir -p /opt/improved_intra_server/logs | |
| cp .secret.env.example .secret.env | |
| sudo chown -R www-data:www-data /opt/improved_intra_server | |
| - name: Start Improved Intra server | |
| working-directory: /opt/improved_intra_server | |
| shell: bash | |
| run: | | |
| bash /opt/improved_intra_server/gunicorn.sh & | |
| timeout 3m bash -c 'until nc -w 10 127.0.0.1 8000; do sleep 1; done' | |
| netstat -tulpn | |
| curl -L http://localhost:8000/ --insecure --verbose --fail | |
| curl -L https://iintra.freekb.es/ --insecure --verbose --resolve 'iintra.freekb.es:443:127.0.0.1' --fail | |
| - name: Print logs | |
| if: always() | |
| working-directory: /opt/improved_intra_server | |
| run: | | |
| cat /opt/improved_intra_server/logs/server.log || true | |
| cat /opt/improved_intra_server/logs/error.log || true | |
| cat /opt/improved_intra_server/logs/access.log || true |