feat: 增加可复用部署工作流工具

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-15 21:49:27 +08:00
commit ec0f2aab5a
9 changed files with 523 additions and 0 deletions
@@ -0,0 +1,38 @@
+# Consuming Repository Configuration
+
+## Laravel deployment variables
+
+```text
+SERVER_DEPLOY_ROOT=/opt/1panel/apps/openresty/openresty/www/sites/example.com/index
+SERVER_CONTAINER_DEPLOY_ROOT=/www/sites/example.com/index
+SERVER_PHP_CONTAINER=php82-example
+SERVER_HEALTHCHECK_URL=https://example.com/up
+```
+
+Laravel deployment secret:
+
+```text
+SERVER_BACKUP_COMMAND=/usr/local/sbin/backup-example-database
+```
+
+The command should be a root-owned server-side wrapper. Do not put database passwords directly in a workflow.
+
+## Mini Program variables
+
+```text
+MINIAPP_APPID=wx0000000000000000
+MINIAPP_API_URL=https://example.com/api
+MINIAPP_ROBOT=1
+```
+
+Mini Program secret:
+
+```text
+WECHAT_CI_PRIVATE_KEY=<complete code-upload private key>
+```
+
+Add the Runner's fixed public egress IP to the WeChat code-upload whitelist.
+
+## Production Runner
+
+Register a repository-scoped host Runner label named `production`. Pull-request workflows must not use this label or access production secrets.