deploy-turn.yml

name: Deploy TURN Server

on:
  push:
    branches:
      - master
    paths:
      - 'apps/turn/**'
      - '!apps/turn/package.json'
  workflow_dispatch:

concurrency:
  group: deploy-turn
  cancel-in-progress: false

jobs:
  deploy:
    runs-on: ubuntu-latest
    name: Deploy to TURN Droplet

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.DROPLET_SSH_KEY }}" > ~/.ssh/id_rsa
          chmod 600 ~/.ssh/id_rsa
          ssh-keyscan -p ${{ secrets.DROPLET_PORT || 22 }} ${{ secrets.DROPLET_HOST }} >> ~/.ssh/known_hosts

      - name: Deploy setup script
        env:
          SSH_HOST: ${{ secrets.DROPLET_HOST }}
          SSH_PORT: ${{ secrets.DROPLET_PORT || 22 }}
          SSH_USER: ${{ secrets.DROPLET_USER }}
          TURN_PASSWORD: ${{ secrets.TURN_SERVER_CREDENTIAL }}
          TURN_REALM: turn.pairux.com
        run: |
          # Copy setup script to droplet
          scp -P $SSH_PORT apps/turn/setup-turn-server.sh $SSH_USER@$SSH_HOST:/tmp/

          # Run setup script
          ssh -p $SSH_PORT $SSH_USER@$SSH_HOST "sudo bash /tmp/setup-turn-server.sh '$TURN_PASSWORD' '' '$TURN_REALM'"

      - name: Verify TURN server
        env:
          SSH_HOST: ${{ secrets.DROPLET_HOST }}
          SSH_PORT: ${{ secrets.DROPLET_PORT || 22 }}
          SSH_USER: ${{ secrets.DROPLET_USER }}
        run: |
          ssh -p $SSH_PORT $SSH_USER@$SSH_HOST "sudo systemctl status coturn --no-pager"

      - name: Cleanup
        if: always()
        run: |
          rm -f ~/.ssh/id_rsa