chore: 最终测试

.gitea/workflows/deploy.yml

@@ -0,0 +1,78 @@
+name: Deploy to K3s
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+
+    container:
+      image: localhost:5000/tiny-ci-runner:latest
+
+    env:
+      IMAGE_TAG: ${{ github.sha }}
+      KUBECONFIG: /tmp/.kube/config
+
+    steps:
+      - name: Write kubeconfig
+        run: |
+          mkdir -p /tmp/.kube
+          cat << 'EOF' > /tmp/.kube/config
+          ${{ secrets.KUBECONFIG_DATA }}
+          EOF
+          chmod 600 /tmp/.kube/config
+
+      - name: Verify Kubernetes access
+        run: |
+          kubectl cluster-info
+          kubectl get nodes
+
+      - name: Checkout code
+        run: |
+          git clone --depth=1 --branch master \
+            https://git.tonesc.cn/tone/tonePage.git \
+            /workspace/tone/tonePage
+          cd /workspace/tone/tonePage
+          git log -1 --oneline
+
+      - name: Build and push backend image
+        run: |
+          cd /workspace/tone/tonePage/apps/backend
+          docker build -t localhost:5000/backend:${IMAGE_TAG} .
+          docker push localhost:5000/backend:${IMAGE_TAG}
+
+      - name: Build and push frontend image
+        run: |
+          cd /workspace/tone/tonePage/apps/frontend
+          docker build \
+            --build-arg API_BASE="http://backend-service:3001" \
+            -t localhost:5000/frontend:${IMAGE_TAG} .
+          docker push localhost:5000/frontend:${IMAGE_TAG}
+
+      - name: Deploy to K3s
+        run: |
+          cd /workspace/tone/tonePage/apps/deploy
+
+          # 基础资源
+          kubectl apply -f postgres-deployment.yaml
+          kubectl apply -f backend-deployment.yaml
+          kubectl apply -f frontend-deployment.yaml
+
+          # 更新镜像（触发滚动更新）
+          kubectl set image deployment/backend \
+            backend=localhost:5000/backend:${IMAGE_TAG}
+
+          kubectl set image deployment/frontend \
+            frontend=localhost:5000/frontend:${IMAGE_TAG}
+
+          # 等待滚动完成
+          kubectl rollout status deployment/backend --timeout=120s
+          kubectl rollout status deployment/frontend --timeout=120s
+
+      - name: Post-deploy sanity check
+        run: |
+          kubectl get pods
+          kubectl get svc

apps/deploy/backend-deployment.yaml

@@ -0,0 +1,77 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: backend
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: backend
+  template:
+    metadata:
+      labels:
+        app: backend
+    spec:
+      containers:
+        - name: backend
+          image: localhost:5000/backend:latest
+          ports:
+            - containerPort: 3001
+          env:
+            - name: DATABASE_HOST
+              value: "postgres-service"
+            - name: DATABASE_PORT
+              value: "5432"
+            - name: DATABASE_NAME
+              value: "tone_page"
+            - name: DATABASE_USERNAME
+              value: "tone_page"
+            - name: DATABASE_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: backend-secret
+                  key: DATABASE_PASSWORD
+            - name: ALIYUN_ACCESS_KEY_ID
+              valueFrom:
+                secretKeyRef:
+                  name: backend-secret
+                  key: ALIYUN_ACCESS_KEY_ID
+            - name: ALIYUN_ACCESS_KEY_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: backend-secret
+                  key: ALIYUN_ACCESS_KEY_SECRET
+            - name: ALIYUN_OSS_STS_ROLE_ARN
+              valueFrom:
+                secretKeyRef:
+                  name: backend-secret
+                  key: ALIYUN_OSS_STS_ROLE_ARN
+            - name: WEBAUTHN_RP_ID
+              valueFrom:
+                secretKeyRef:
+                  name: backend-secret
+                  key: WEBAUTHN_RP_ID
+            - name: WEBAUTHN_ORIGIN
+              valueFrom:
+                secretKeyRef:
+                  name: backend-secret
+                  key: WEBAUTHN_ORIGIN
+            - name: WEBAUTHN_RP_NAME
+              valueFrom:
+                secretKeyRef:
+                  name: backend-secret
+                  key: WEBAUTHN_RP_NAME
+            - name: NODE_ENV
+              value: "production"
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: backend-service
+spec:
+  selector:
+    app: backend
+  ports:
+    - protocol: TCP
+      port: 3001
+      targetPort: 3001

apps/deploy/backend-secret.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: backend-secret
+type: Opaque
+# stringData:
+#   DATABASE_PASSWORD:
+#   ALIYUN_ACCESS_KEY_ID:
+#   ALIYUN_ACCESS_KEY_SECRET:
+#   ALIYUN_OSS_STS_ROLE_ARN:
+#   WEBAUTHN_RP_ID:
+#   WEBAUTHN_ORIGIN:
+#   WEBAUTHN_RP_NAME:

apps/deploy/frontend-deployment.yaml

@@ -0,0 +1,32 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: frontend
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: frontend
+  template:
+    metadata:
+      labels:
+        app: frontend
+    spec:
+      containers:
+        - name: frontend
+          image: localhost:5000/frontend:latest
+          ports:
+            - containerPort: 3000
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: frontend-service
+spec:
+  type: NodePort
+  ports:
+    - port: 3000
+      targetPort: 3000
+      nodePort: 30000
+  selector:
+    app: frontend

apps/deploy/postgres-deployment.yaml

@@ -0,0 +1,42 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: postgres
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: postgres
+  template:
+    metadata:
+      labels:
+        app: postgres
+    spec:
+      containers:
+        - name: postgres
+          image: postgres:17-alpine
+          ports:
+            - containerPort: 5432
+          envFrom:
+            - secretRef:
+                name: postgres-secret
+          volumeMounts:
+            - name: postgres-storage
+              mountPath: /var/lib/postgresql/data
+      volumes:
+        - name: postgres-storage
+          hostPath:
+            path: /var/lib/postgres-data
+            type: DirectoryOrCreate
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: postgres-service
+spec:
+  selector:
+    app: postgres
+  ports:
+    - protocol: TCP
+      port: 5432
+      targetPort: 5432

apps/deploy/postgres-nodeport.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: postgres-nodeport
+spec:
+  type: NodePort
+  ports:
+    - port: 5432
+      targetPort: 5432
+      nodePort: 30001
+  selector:
+    app: postgres

apps/deploy/postgres-secret.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: postgres-secret
+type: Opaque
+# stringData:
+#   POSTGRES_USER: 
+#   POSTGRES_PASSWORD: 
+#   POSTGRES_DB: 

apps/frontend/Dockerfile

@@ -21,6 +21,7 @@ COPY --from=builder /app/.next ./.next
 COPY --from=builder /app/public ./public
 COPY --from=builder /app/next.config.ts ./
 
+ARG API_BASE
 ENV API_BASE=$API_BASE
 
 EXPOSE 3000

apps/frontend/app/(with-header-footer)/page.tsx

@@ -1,11 +1,10 @@
-import favicon from '../favicon.ico';
 import Image from 'next/image';
 
 export default function Home() {
   return (
     <div className="w-full flex-1 flex flex-col items-center justify-center">
       <Image
-        src={favicon.src}
+        src="/avatar.png"
         alt="TONE's avatar"
         width={180}
         height={180}

apps/frontend/app/layout.tsx

@@ -27,6 +27,7 @@ export default async function RootLayout({
 
   return (
     <html lang="en" suppressHydrationWarning>
+      <link rel="icon" href="/favicon.ico" />
       <body
         className={`${geistSans.variable} ${geistMono.variable} antialiased min-h-screen flex flex-col`}
         suppressHydrationWarning