vor: stack + playbook + workflow template for ana-docker deploy

Same shape as task-board: build-on-host from vh/vor, bind-mounted persistence for sessions/ and responses/ (the user-published markdown files), exposed at port 7879 (adjacent to task-board's 7878 since both are claude-tooling sidecars). Workflow template assumes the same DEPLOY_SSH_KEY + MGMT_REPO_TOKEN secrets at user scope; nothing new to provision. Playbook accepts SHA or branch refs (same fix as deploy-task-board.yaml) so manual runs and CI runs share the same code path. Centralized vs upstream-local: README documents the trade. Claude fetches response markdown via /api/sessions/{id} JSON instead of a local file read — the only API-flow change from the upstream README.
2026-04-29 21:31:59 -07:00
parent f44a1d1c02
commit a61b577c59
5 changed files with 300 additions and 0 deletions
@@ -0,0 +1,65 @@
+# Gitea Actions workflow for vor.
+#
+# THIS FILE LIVES IN THE VOR REPO, NOT HERE.
+# Copy to vh/vor:.gitea/workflows/deploy.yaml and commit.
+#
+# Identical pattern to stacks/task-board/gitea-workflow-deploy.yaml.example
+# — checks out vor + eshpfi-management, then runs the elway playbook
+# pinned to the triggering commit SHA. The playbook is the single
+# source of truth for "how vor is deployed", manual or automated.
+#
+# Required Actions secrets (already set at user scope from earlier
+# task-board wiring; nothing new needed):
+#
+#   DEPLOY_SSH_KEY    Private SSH key authorized for lkraven@ana-docker.
+#   MGMT_REPO_TOKEN   Gitea PAT (read:repository) on vh/esh-pfi-infrastructure.
+
+name: Deploy vor
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    runs-on: pfi-fleet
+
+    steps:
+      - name: Install playbook prerequisites
+        run: |
+          apt-get update -qq
+          apt-get install -y --no-install-recommends \
+            python3 python3-yaml openssh-client
+          rm -rf /var/lib/apt/lists/*
+
+      - name: Checkout vor (triggering repo)
+        uses: actions/checkout@v4
+
+      - name: Checkout management repo (eshpfi-management)
+        uses: actions/checkout@v4
+        with:
+          repository: vh/esh-pfi-infrastructure
+          token: ${{ secrets.MGMT_REPO_TOKEN }}
+          path: _mgmt
+
+      - name: Configure SSH to ana-docker
+        run: |
+          mkdir -p ~/.ssh
+          printf '%s\n' "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+          cat > ~/.ssh/config <<'EOF'
+          Host ana-docker
+            HostName 10.250.50.70
+            User lkraven
+            IdentityFile ~/.ssh/id_ed25519
+            StrictHostKeyChecking accept-new
+          EOF
+          chmod 600 ~/.ssh/config
+
+      - name: Deploy vor (elway playbook, pinned to this commit)
+        working-directory: _mgmt
+        run: |
+          scripts/elway ana-docker \
+            --playbook playbooks/deploy-vor.yaml \
+            --var ref=${{ github.sha }}