110 lines
4.1 KiB
YAML
110 lines
4.1 KiB
YAML
name: Deploy to Cloudflare Workers
|
||
|
||
on:
|
||
push:
|
||
branches:
|
||
- main
|
||
workflow_dispatch:
|
||
inputs:
|
||
worker_name:
|
||
description: 'Worker Name'
|
||
required: false
|
||
default: ''
|
||
|
||
# 所有配置均通过 Secrets 传入（public 仓库的 Variables 对所有人可见，不安全）
|
||
#
|
||
# 在仓库 Settings → Secrets and variables → Actions → Secrets 中配置：
|
||
#
|
||
# 必填：
|
||
# CLOUDFLARE_API_TOKEN - Cloudflare API Token（需要 Workers 编辑权限）
|
||
# CLOUDFLARE_ACCOUNT_ID - Cloudflare Account ID
|
||
#
|
||
# 数据库（二选一）：
|
||
# D1_DATABASE_ID - D1 数据库 ID
|
||
# KV_NAMESPACE_ID - KV 命名空间 ID
|
||
#
|
||
# 可选：
|
||
# R2_BUCKET_NAME - R2 存储桶名称
|
||
# WORKER_NAME - Worker 名称（默认 cloudflare-imgbed，手动触发时可在界面覆盖）
|
||
# WORKER_VARS - JSON 格式的业务环境变量，兼容直接值写法。
|
||
# 对象写法支持 value 和可选 type（text/secret，默认 text）。
|
||
# text 随 Worker 部署，secret 在部署后统一上传为 Cloudflare Secret。
|
||
# 非必要不建议配置，业务设置请在管理面板中配置。
|
||
# 示例（请替换密钥，迁移现有配置时保持密钥值不变）：
|
||
# {
|
||
# "CUSTOM_DOMAIN": "https://img.example.com",
|
||
# "TG_CHAT_ID": { "value": "123456", "type": "text" },
|
||
# "AI_CONFIG_SECRET": { "value": "至少32个字符的随机密钥", "type": "secret" },
|
||
# "TG_BOT_TOKEN": { "value": "你的Bot Token", "type": "secret" }
|
||
# }
|
||
|
||
jobs:
|
||
deploy:
|
||
runs-on: ubuntu-latest
|
||
# 仅在 fork 仓库且配置了 Cloudflare secrets 时运行
|
||
# 原仓库 push 和未配置 secrets 的 fork 不会触发部署
|
||
if: ${{ github.event.repository.fork }}
|
||
steps:
|
||
- name: Check deployment config
|
||
id: check
|
||
run: |
|
||
if [ -z "${{ secrets.CLOUDFLARE_API_TOKEN }}" ]; then
|
||
echo "CLOUDFLARE_API_TOKEN not configured, skipping Worker deployment"
|
||
echo "skip=true" >> $GITHUB_OUTPUT
|
||
else
|
||
echo "skip=false" >> $GITHUB_OUTPUT
|
||
fi
|
||
|
||
- name: Checkout
|
||
if: steps.check.outputs.skip != 'true'
|
||
uses: actions/checkout@v6
|
||
|
||
- name: Setup Node.js
|
||
if: steps.check.outputs.skip != 'true'
|
||
uses: actions/setup-node@v5
|
||
with:
|
||
node-version: '22'
|
||
|
||
- name: Install dependencies
|
||
if: steps.check.outputs.skip != 'true'
|
||
run: npm ci --workspace=@cloudflare-imgbed/common --workspace=@cloudflare-imgbed/worker --omit=dev
|
||
|
||
- name: Generate worker routes
|
||
if: steps.check.outputs.skip != 'true'
|
||
run: node deploy/worker/generate-routes.js
|
||
|
||
- name: Generate wrangler config
|
||
id: config
|
||
if: steps.check.outputs.skip != 'true'
|
||
env:
|
||
WORKER_NAME: ${{ inputs.worker_name || secrets.WORKER_NAME }}
|
||
D1_DATABASE_ID: ${{ secrets.D1_DATABASE_ID }}
|
||
KV_NAMESPACE_ID: ${{ secrets.KV_NAMESPACE_ID }}
|
||
R2_BUCKET_NAME: ${{ secrets.R2_BUCKET_NAME }}
|
||
WORKER_VARS: ${{ secrets.WORKER_VARS }}
|
||
run: node deploy/worker/generate-toml.js
|
||
|
||
- name: Deploy to Cloudflare Workers
|
||
if: steps.check.outputs.skip != 'true'
|
||
uses: cloudflare/wrangler-action@v3
|
||
with:
|
||
apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
|
||
accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
|
||
wranglerVersion: '4'
|
||
command: deploy --config deploy/worker/wrangler.toml
|
||
|
||
- name: Upload Worker secrets
|
||
if: steps.check.outputs.skip != 'true' && steps.config.outputs.has_secrets == 'true'
|
||
uses: cloudflare/wrangler-action@v3
|
||
with:
|
||
apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
|
||
accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
|
||
wranglerVersion: '4'
|
||
command: secret bulk "${{ steps.config.outputs.secrets_path }}" --config deploy/worker/wrangler.toml
|
||
|
||
- name: Clean up Worker secrets file
|
||
if: always() && steps.config.outputs.has_secrets == 'true'
|
||
env:
|
||
WORKER_SECRETS_FILE: ${{ steps.config.outputs.secrets_path }}
|
||
run: rm -f -- "$WORKER_SECRETS_FILE"
|