feat(site): migrate deployment workflow to rainyun

EmptyDust · codex · EmptyDust · commit 7a8ebe7bb37b · 2026-03-31T19:26:03.000+08:00
Co-authored-by: Codex &lt;codex@openai.com&gt;
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -15,8 +15,6 @@ jobs:
     runs-on: ubuntu-latest
     env:
       TZ: Asia/Shanghai
-    permissions:
-      contents: write
     concurrency:
       group: ${{ github.workflow }}-${{ github.ref_name }}
 
@@ -46,21 +44,83 @@ jobs:
 
       - name: 安装项目依赖
         run: |
-          # 这一步会根据新的 package.json 安装所有东西
-          # 包括：hexo核心、渲染器(pug/stylus)、gulp、bangumi插件
           yarn install --immutable
 
+      - name: 校验 Rainyun 部署参数
+        env:
+          RAINYUN_HOST: ${{ secrets.RAINYUN_HOST }}
+          RAINYUN_PORT: ${{ secrets.RAINYUN_PORT }}
+          RAINYUN_USER: ${{ secrets.RAINYUN_USER }}
+          RAINYUN_TARGET_DIR: ${{ secrets.RAINYUN_TARGET_DIR }}
+          RAINYUN_SSH_KEY: ${{ secrets.RAINYUN_SSH_KEY }}
+        run: |
+          for key in RAINYUN_HOST RAINYUN_USER RAINYUN_TARGET_DIR RAINYUN_SSH_KEY; do
+            if [ -z "${!key}" ]; then
+              echo "::error::缺少 GitHub Secret: ${key}"
+              exit 1
+            fi
+          done
+
+          if [ -z "${RAINYUN_PORT}" ]; then
+            echo "RAINYUN_PORT 未配置，使用默认端口 22"
+          fi
+
+      - name: 覆盖站点 URL
+        env:
+          SITE_URL: ${{ secrets.SITE_URL }}
+          SITE_ROOT: ${{ secrets.SITE_ROOT }}
+        run: |
+          if [ -z "${SITE_URL}" ] && [ -z "${SITE_ROOT}" ]; then
+            exit 0
+          fi
+
+          node <<'EOF'
+          const fs = require('fs');
+          const path = '_config.yml';
+          let text = fs.readFileSync(path, 'utf8');
+
+          if (process.env.SITE_URL) {
+            text = text.replace(/^url:\s*.*/m, `url: ${process.env.SITE_URL}`);
+          }
+
+          if (process.env.SITE_ROOT) {
+            text = text.replace(/^root:\s*.*/m, `root: ${process.env.SITE_ROOT}`);
+          }
+
+          fs.writeFileSync(path, text);
+          EOF
+
       - name: 生成静态文件
         run: |
           npx hexo clean
           npx hexo bangumi -u
           npx hexo generate
-          # 如果以后需要 gulp，取消注释即可，不需要再安装 gulp-cli
-          # npx gulp 
 
-      - name: Deploy
-        uses: peaceiris/actions-gh-pages@v4
+      - name: 加载 SSH 私钥
+        uses: webfactory/ssh-agent@v0.9.1
         with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          publish_dir: ./public
-          publish_branch: gh-pages
+          ssh-private-key: ${{ secrets.RAINYUN_SSH_KEY }}
+
+      - name: 写入 known_hosts
+        env:
+          RAINYUN_HOST: ${{ secrets.RAINYUN_HOST }}
+          RAINYUN_PORT: ${{ secrets.RAINYUN_PORT }}
+        run: |
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          ssh-keyscan -p "${RAINYUN_PORT:-22}" -H "${RAINYUN_HOST}" >> ~/.ssh/known_hosts
+
+      - name: 部署到 Rainyun
+        env:
+          RAINYUN_HOST: ${{ secrets.RAINYUN_HOST }}
+          RAINYUN_PORT: ${{ secrets.RAINYUN_PORT }}
+          RAINYUN_USER: ${{ secrets.RAINYUN_USER }}
+          RAINYUN_TARGET_DIR: ${{ secrets.RAINYUN_TARGET_DIR }}
+          RAINYUN_POST_DEPLOY: ${{ secrets.RAINYUN_POST_DEPLOY }}
+        run: |
+          ssh -p "${RAINYUN_PORT:-22}" "${RAINYUN_USER}@${RAINYUN_HOST}" "mkdir -p '${RAINYUN_TARGET_DIR}'"
+          rsync -az --delete -e "ssh -p ${RAINYUN_PORT:-22}" ./public/ "${RAINYUN_USER}@${RAINYUN_HOST}:${RAINYUN_TARGET_DIR}/"
+
+          if [ -n "${RAINYUN_POST_DEPLOY}" ]; then
+            ssh -p "${RAINYUN_PORT:-22}" "${RAINYUN_USER}@${RAINYUN_HOST}" "${RAINYUN_POST_DEPLOY}"
+          fi
diff --git a/README.md b/README.md
@@ -5,7 +5,7 @@ Fengling's free website.
 
 - `master`: site code, Hexo config, themes, and deployment workflow
 - `content`: authored Markdown and content data only
-- `gh-pages`: generated static files published by GitHub Actions
+- GitHub Actions: builds from `master + content` and syncs the generated `public/` directory to Rainyun over SSH
 
 Content paths are defined in `tools/content-paths.txt`.
 
@@ -32,4 +32,19 @@ GitHub Actions now builds the site from:
 - the latest `master` branch for code and build configuration
 - the latest `content` branch for posts and page content
 
-The deploy workflow runs on pushes to `master` or `content`, imports `origin/content` into the checked-out `master` tree, builds the site, and publishes to `gh-pages`.
+The deploy workflow runs on pushes to `master` or `content`, imports `origin/content` into the checked-out `master` tree, builds the site, and syncs `public/` to Rainyun with `rsync`.
+
+## Rainyun Setup
+
+Configure these GitHub Secrets before enabling deployment:
+
+- `RAINYUN_HOST`: Rainyun server IP or domain
+- `RAINYUN_PORT`: SSH port, usually `22`
+- `RAINYUN_USER`: deploy user, for example `root`
+- `RAINYUN_TARGET_DIR`: static site root on the server, for example `/var/www/emptydust`
+- `RAINYUN_SSH_KEY`: private key used by GitHub Actions to log into the server
+- `RAINYUN_POST_DEPLOY`: optional remote command after upload, for example `sudo systemctl reload nginx`
+- `SITE_URL`: optional production site URL used during Hexo build
+- `SITE_ROOT`: optional Hexo root, default `/`
+
+See [docs/rainyun-deploy.md](docs/rainyun-deploy.md) for the server-side checklist and an example Nginx config.
diff --git a/_config.yml b/_config.yml
@@ -111,11 +111,8 @@ ignore:
 theme: anzhiyu
 
 # Deployment
-## Docs: https://hexo.io/docs/one-command-deployment
+## Production deployment is handled by GitHub Actions and synced to Rainyun via SSH/rsync.
 deploy:
-  type: git
-  repo: git@github.com:EmptyDust/EmptyDust.github.io.git
-  branch: gh-pages
 
 pandoc:
   args:
diff --git a/docs/rainyun-deploy.md b/docs/rainyun-deploy.md
@@ -0,0 +1,127 @@
+# Rainyun 部署说明
+
+这个仓库已经改成：
+
+- `master` 保存站点代码、主题配置、GitHub Actions 工作流
+- `content` 保存文章和页面内容
+- GitHub Actions 在 `master` 或 `content` 更新后自动构建，并把 `public/` 同步到 Rainyun
+
+## 1. 准备 Rainyun 服务器
+
+推荐使用一台 Linux 云服务器，并保证：
+
+- 可以通过 SSH 登录
+- 已安装 `nginx`
+- 已安装 `rsync`
+- 站点目录已经创建，例如 `/var/www/emptydust`
+
+Rainyun 官方文档：
+
+- 连接服务器: https://www.rainyun.com/docs/rgs/detail/connect/
+- 管理实例与绑定域名入口: https://www.rainyun.com/docs/rgs/detail/manage/
+- 如果你想用面板，也可以直接预装 1Panel: https://www.rainyun.com/docs/guide/cloud/1panel/
+
+## 2. 服务器初始化
+
+以 Ubuntu/Debian 为例：
+
+```bash
+sudo apt update
+sudo apt install -y nginx rsync
+sudo mkdir -p /var/www/emptydust
+sudo chown -R $USER:$USER /var/www/emptydust
+```
+
+## 3. Nginx 配置示例
+
+把下面内容保存为 `/etc/nginx/sites-available/emptydust.conf`：
+
+```nginx
+server {
+  listen 80;
+  server_name example.com www.example.com;
+
+  root /var/www/emptydust;
+  index index.html;
+
+  location / {
+    try_files $uri $uri/ =404;
+  }
+
+  location = /search.json {
+    add_header Cache-Control "no-cache";
+  }
+}
+```
+
+启用配置：
+
+```bash
+sudo ln -sf /etc/nginx/sites-available/emptydust.conf /etc/nginx/sites-enabled/emptydust.conf
+sudo nginx -t
+sudo systemctl reload nginx
+```
+
+如果已经绑定域名并准备上 HTTPS，再额外配置证书即可。
+
+## 4. GitHub Secrets
+
+在 GitHub 仓库里配置以下 Secrets：
+
+- `RAINYUN_HOST`
+- `RAINYUN_PORT`
+- `RAINYUN_USER`
+- `RAINYUN_TARGET_DIR`
+- `RAINYUN_SSH_KEY`
+- `RAINYUN_POST_DEPLOY` 可选
+- `SITE_URL` 可选
+- `SITE_ROOT` 可选
+
+推荐值示例：
+
+```text
+RAINYUN_HOST=1.2.3.4
+RAINYUN_PORT=22
+RAINYUN_USER=root
+RAINYUN_TARGET_DIR=/var/www/emptydust
+RAINYUN_POST_DEPLOY=sudo systemctl reload nginx
+SITE_URL=https://example.com/
+SITE_ROOT=/
+```
+
+`RAINYUN_SSH_KEY` 使用 GitHub Actions 专用私钥，对应公钥要加入服务器：
+
+```bash
+mkdir -p ~/.ssh
+chmod 700 ~/.ssh
+cat >> ~/.ssh/authorized_keys
+chmod 600 ~/.ssh/authorized_keys
+```
+
+把公钥粘进去保存即可。
+
+## 5. 触发部署
+
+部署会在这些情况下自动执行：
+
+- push 到 `master`
+- push 到 `content`
+- 手动触发 `workflow_dispatch`
+
+工作流会执行：
+
+1. checkout `master`
+2. 拉取并导入 `content`
+3. 安装主题与依赖
+4. `hexo clean && hexo bangumi -u && hexo generate`
+5. `rsync --delete` 上传 `public/` 到 Rainyun
+
+## 6. 本地核对点
+
+如果线上访问异常，优先检查：
+
+- `SITE_URL` 是否和最终域名一致
+- `RAINYUN_TARGET_DIR` 是否就是 Nginx 的 `root`
+- SSH 端口和用户是否正确
+- 服务器是否安装了 `rsync`
+- Nginx 是否已 reload
