--- on: push: branches: - develop jobs: deploy: runs-on: ubuntu-latest steps: # - name: Checkout cuqmbr/homelab repository # run: git clone https://git.cuqmbr.xyz/cuqmbr/homelab.git --depth 1 --branch main --single-branch # - name: Setup ansible # run: apt-get update && apt-get install ansible-core -y - name: Add SSH key env: SSH_AUTH_SOCK: /tmp/ssh_agent.sock run: | mkdir -p ~/.ssh echo "${{secrets.ANSIBLE_SSH_KEY}}" > ~/.ssh/key chmod 600 ~/.ssh/key ssh-agent -a $SSH_AUTH_SOCK > /dev/null ssh-add ~/.ssh/key - name: Connect directly to bastion env: SSH_AUTH_SOCK: /tmp/ssh_agent.sock run: | ssh -o StrictHostKeyChecking=no gitea-actions@bastion.cuqmbr.home 'cat /etc/hostname' # - name: Run ansible playbook # env: # SSH_AUTH_SOCK: /tmp/ssh_agent.sock # run: | # cd ./homelab/ansible # ansible-playbook -vvvv -u gitea-actions --ssh-common-args "-o ProxyCommand='ssh -p 22 -W %h:%p -q gitea-actions@bastion.cuqmbr.home'" --private-key ~/.ssh/key -b --become-method doas --start-at-task 'Install hugo deb package from github.' -i inventories/dev/hosts.yml 20_main_page.yml # -o PreferredAuthentications=publickey -o ForwardAgent=yes - name: Run ansible playbook env: SSH_AUTH_SOCK: /tmp/ssh_agent.sock run: | ssh -o StrictHostKeyChecking=no -J gitea-actions@bastion.cuqmbr.home gitea-actions@192.168.0.10 'cat /etc/hostname' # ssh -vvvv -o StrictHostKeyChecking=no -o ForwardAgent=yes -o ProxyCommand='ssh -W %h:%p -q gitea-actions@bastion.cuqmbr.home' gitea-actions@192.168.0.10 'cat /etc/hostname'