From 0ce6958d424d93a8922de5018759b43c35e57c4d Mon Sep 17 00:00:00 2001
From: DeveloperDurp <DeveloperDurp@durp.info>
Date: Tue, 19 May 2026 06:01:46 -0500
Subject: [PATCH] update

---
 .forgejo/workflows/workflow.yaml | 107 +++++++++++++++++++++++++++++++
 1 file changed, 107 insertions(+)
 create mode 100644 .forgejo/workflows/workflow.yaml

diff --git a/.forgejo/workflows/workflow.yaml b/.forgejo/workflows/workflow.yaml
new file mode 100644
index 0000000..996050d
--- /dev/null
+++ b/.forgejo/workflows/workflow.yaml
@@ -0,0 +1,107 @@
+name: Ansible Deployment
+
+on:
+  workflow_dispatch:
+    inputs:
+      SCRIPT:
+        description: 'Select which Ansible playbook to run'
+        required: true
+        default: 'base'
+        type: choice
+        options:
+          - 'base'
+          - 'k3s'
+      ENVIRONMENT_NAME:
+        description: 'Select the Environment'
+        required: true
+        default: 'dev'
+        type: choice
+        options:
+          - 'dev'
+          - 'prd'
+          - 'infra'
+          - 'dmz'
+
+env:
+  ANSIBLE_CONFIG: "${{ github.workspace }}/ansible.cfg"
+  DEBIAN_FRONTEND: noninteractive
+
+jobs:
+  ansible-base:
+    if: ${{ github.event.inputs.SCRIPT == 'base' }}
+    runs-on: ubuntu-latest
+    container:
+      image: registry.durp.info/ubuntu:latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install dependencies and SSH
+        run: |
+          apt update && apt install tzdata ansible python3-pip -y
+          eval $(ssh-agent -s)
+          echo "${{ secrets.SSH_PRIVATE_KEY }}" | tr -d '\r' | ssh-add - > /dev/null
+
+      - name: Run Base Playbook
+        run: ansible-playbook ${{ github.workspace }}/ansible/base.yaml
+
+  ansible-k3s:
+    if: ${{ github.event.inputs.SCRIPT == 'k3s' }}
+    runs-on: ubuntu-latest
+    container:
+      image: registry.durp.info/ubuntu:latest
+    strategy:
+      matrix:
+        include:
+          - env_name: dev
+            cluster: "dev-cluster"
+            endpoint: "192.168.10.10"
+            token_secret: "dev_k3s_token"
+          - env_name: prd
+            cluster: "prd-cluster"
+            endpoint: "192.168.11.10"
+            token_secret: "prd_k3s_token"
+          - env_name: infra
+            cluster: "infra-cluster"
+            endpoint: "192.168.12.10"
+            token_secret: "infra_k3s_token"
+          - env_name: dmz
+            cluster: "dmz-cluster"
+            endpoint: "192.168.98.10"
+            token_secret: "dmz_k3s_token"
+    # Filter matrix to only run selected environment
+    steps:
+      - name: Check Environment
+        if: ${{ github.event.inputs.ENVIRONMENT_NAME != matrix.env_name }}
+        run: exit 0 # Skip if not the selected environment
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install dependencies and SSH
+        run: |
+          apt update && apt install tzdata ansible python3-pip -y
+          eval $(ssh-agent -s)
+          echo "${{ secrets.SSH_PRIVATE_KEY }}" | tr -d '\r' | ssh-add - > /dev/null
+
+      - name: Install Galaxy Roles
+        run: ansible-galaxy install -r ${{ github.workspace }}/ansible/roles/k3s/requirements.yaml
+
+      - name: Run K3s Playbook
+        env:
+          CLUSTER: ${{ matrix.cluster }}
+          # Accessing secrets dynamically by name
+          K3S_TOKEN: ${{ secrets[matrix.token_secret] }}
+        run: |
+          ansible-playbook ${{ github.workspace }}/ansible/k3s.yaml \
+            -e cluster=$CLUSTER \
+            -e api_endpoint=${{ matrix.endpoint }} \
+            -e k3s_version="v1.35.0+k3s3" \
+            -e k3s_token=$K3S_TOKEN
+
+      - name: Upload Kubeconfig
+        uses: actions/upload-artifact@v4
+        with:
+          name: kubeconfig-${{ matrix.env_name }}
+          path: ${{ github.workspace }}/ansible/kubeconfig
+          retention-days: 1
\ No newline at end of file