Deploy: wybierz typ aplikacji

Playbook: osobny frontend (Quiz)

Wzorzec: QuizHub. Frontend to osobny katalog frontend/ (npm). Podczas deployu buduje się na runnerze i wpada do wwwroot backendu. Jedna usługa, jeden nginx. Nie ma osobnego vhosta na SPA. Nie ma Swaggera w tym playbooku — to aplikacja z UI.

Prawdziwy workflow (działa na serwerze)

name: Deploy Quiz

on:
  push:
    branches: [main]

jobs:
  deploy:
    runs-on: self-hosted

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: "npm"
          cache-dependency-path: frontend/package-lock.json

      - name: Build frontend
        run: |
          cd frontend
          npm ci
          npm run build

      - name: Copy frontend to backend static folder
        run: |
          mkdir -p backend/QuizHub.Api/wwwroot
          cp -r frontend/dist/* backend/QuizHub.Api/wwwroot/

      - name: Publish backend
        run: |
          cd backend/QuizHub.Api
          dotnet publish -c Release -o publish

      - name: Deploy to server
        run: |
          DEPLOY_DIR="/home/devops/quiz/backend"
          mkdir -p "$DEPLOY_DIR"
          cp -r backend/QuizHub.Api/publish/* "$DEPLOY_DIR/"

      - name: Restart Quiz service
        run: sudo systemctl restart quizhub

Kolejność jest obowiązkowa: npm build → kopia dist do wwwroot → dopiero publish. Odwrócenie kolejności = pusty UI po deploju.

Szablon dla nowej apki z osobnym frontem

name: Deploy <NazwaApp>
on:
  push:
    branches: [main]
jobs:
  deploy:
    runs-on: self-hosted
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with:
          node-version: "20"
          cache: npm
          cache-dependency-path: frontend/package-lock.json
      - name: Build frontend
        run: |
          cd frontend
          npm ci
          npm run build
      - name: Copy frontend to backend static folder
        run: |
          mkdir -p backend/<Projekt>.Api/wwwroot
          cp -r frontend/dist/* backend/<Projekt>.Api/wwwroot/
      - name: Publish backend
        run: |
          cd backend/<Projekt>.Api
          dotnet publish -c Release -o publish
      - name: Deploy to server
        run: |
          DEPLOY_DIR="/home/devops/<app>/backend"
          mkdir -p "$DEPLOY_DIR"
          cp -r backend/<Projekt>.Api/publish/* "$DEPLOY_DIR/"
      - run: sudo systemctl restart <app-service>

Konfiguracja aplikacji (UI + API, bez Swagger-path)

Kestrel serwuje wybuildowany frontend z wwwroot i API. Bind na wszystkich interfejsach:

ExecStart=/usr/bin/dotnet .../QuizHub.Api.dll --urls http://0.0.0.0:5006

W Production nie przekierowuj na HTTPS w Kestrelu (robi to nginx). ForwardedHeaders jak w API, jeśli logujesz schemat/HTTPS za proxy — ale nie konfigurujesz SwaggerBasePath.

Serwer i systemd (Quiz)

sudo mkdir -p /home/devops/quiz/backend
sudo chown -R devops:devops /home/devops/quiz

Działający unit:

[Unit]
Description=QuizHub App
After=network.target

[Service]
Type=simple
User=devops
WorkingDirectory=/home/devops/quiz/backend
ExecStart=/usr/bin/dotnet /home/devops/quiz/backend/QuizHub.Api.dll --urls http://0.0.0.0:5006
Restart=always
RestartSec=5
Environment=ASPNETCORE_ENVIRONMENT=Production

[Install]
WantedBy=multi-user.target

devops ALL=(ALL) NOPASSWD: /bin/systemctl restart quizhub

Nginx — reverse proxy + WebSocket (Quiz)

Oprócz location / jest location /hubs/ (SignalR). Tego nie kopiuj do Auth ani PPL, jeśli nie masz hubów.

server {
    server_name quiz.pepisboczek.ddns.net;

    location / {
        proxy_pass http://127.0.0.1:5006/;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }

    location /hubs/ {
        proxy_pass http://127.0.0.1:5006;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }

    listen 443 ssl;
    ssl_certificate /etc/letsencrypt/live/quiz.pepisboczek.ddns.net/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/quiz.pepisboczek.ddns.net/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
}
server {
    listen 80;
    server_name quiz.pepisboczek.ddns.net;
    return 301 https://$host$request_uri;
}

SSL

sudo certbot --nginx -d quiz.pepisboczek.ddns.net
curl -s -o /dev/null -w "%{http_code}\n" https://quiz.pepisboczek.ddns.net/

Checklist — osobny frontend

• Repo: katalogi frontend/ i backend/<Projekt>.Api/
• YAML: Node 20 → npm ci/build → cp dist do wwwroot → publish → deploy → restart
• Katalog /home/devops/<app>/backend
• nginx: / + ewentualnie /hubs/
• Bez SwaggerBasePath, bez setup-dotnet

Playbook: frontend już w wwwroot (PPL)

Wzorzec: PPL. HTML/CSS/JS (Vue z wwwroot) są w repo. Nie ma npm, nie ma kroku Node, nie ma Swaggera. Sam dotnet publish pakuje statyki.

Katalog deploy jest płaski: /home/devops/ppl (bez /backend). To druga dozwolona konwencja.

Prawdziwy workflow (działa na serwerze)

name: Deploy PPL

on:
  push:
    branches: [main]

jobs:
  deploy:
    runs-on: self-hosted

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Publish
        run: |
          cd PPL
          dotnet publish -c Release -o publish

      - name: Deploy to server
        run: |
          DEPLOY_DIR="/home/devops/ppl"
          mkdir -p "$DEPLOY_DIR"
          cp -r PPL/publish/* "$DEPLOY_DIR/"

      - name: Restart PPL service
        run: sudo systemctl restart ppl

Tu nie ma Setup Node.js ani kopiowania dist — bo nie ma osobnego frontendu.

Szablon

name: Deploy <NazwaApp>
on:
  push:
    branches: [main]
jobs:
  deploy:
    runs-on: self-hosted
    steps:
      - uses: actions/checkout@v4
      - name: Publish
        run: |
          cd <ProjektDir>
          dotnet publish -c Release -o publish
      - name: Deploy to server
        run: |
          DEPLOY_DIR="/home/devops/<app>"
          mkdir -p "$DEPLOY_DIR"
          cp -r <ProjektDir>/publish/* "$DEPLOY_DIR/"
      - run: sudo systemctl restart <app-service>

Jeśli wolisz konwencję z /backend, zmień DEPLOY_DIR i WorkingDirectory razem.

Konfiguracja aplikacji (PPL)

Statyki z wwwroot. Bind przez zmienną środowiska, nie --urls (tak jest na serwerze):

Environment=ASPNETCORE_ENVIRONMENT=Production
Environment=ASPNETCORE_URLS=http://0.0.0.0:5080

Nie konfigurujesz Swaggera ani npm. W Production nie zrzucaj HTTPS na Kestrel.

Serwer i systemd (PPL)

sudo mkdir -p /home/devops/ppl
sudo chown -R devops:devops /home/devops/ppl

Działający unit:

[Unit]
Description=PPL Test
After=network.target

[Service]
WorkingDirectory=/home/devops/ppl
ExecStart=/usr/bin/dotnet /home/devops/ppl/PPL.dll
Restart=always
RestartSec=5
User=devops
Environment=ASPNETCORE_ENVIRONMENT=Production
Environment=ASPNETCORE_URLS=http://0.0.0.0:5080
Environment=DOTNET_PRINT_TELEMETRY_MESSAGE=false

[Install]
WantedBy=multi-user.target

devops ALL=(ALL) NOPASSWD: /bin/systemctl restart ppl

Nginx — reverse proxy (PPL, bez WebSocket)

server {
    server_name ppl.pepisboczek.ddns.net;
    location / {
        proxy_pass http://127.0.0.1:5080/;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    listen 443 ssl;
    ssl_certificate /etc/letsencrypt/live/ppl.pepisboczek.ddns.net/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/ppl.pepisboczek.ddns.net/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
}
server {
    listen 80;
    server_name ppl.pepisboczek.ddns.net;
    return 301 https://$host$request_uri;
}

SSL

sudo certbot --nginx -d ppl.pepisboczek.ddns.net
curl -s -o /dev/null -w "%{http_code}\n" https://ppl.pepisboczek.ddns.net/

Checklist — wwwroot w repo

• YAML bez Node: checkout → publish → cp → restart
• Katalog /home/devops/<app> (płaski) albo świadomie .../backend
• ASPNETCORE_URLS=http://0.0.0.0:<port>
• nginx tylko location /
• Bez setup-dotnet, bez SwaggerBasePath