| #!/bin/sh |
| set -eu |
|
|
| |
| |
| |
| : "${GIT_REPO_URL:?GIT_REPO_URL secret is required}" |
| : "${GIT_TOKEN:?GIT_TOKEN secret is required}" |
|
|
| GIT_HOST="${GIT_HOST:-github.com}" |
| GIT_USERNAME="${GIT_USERNAME:-x-access-token}" |
|
|
| APP_DIR="/app/src" |
| CREDS="/tmp/git-credentials" |
|
|
| cleanup() { |
| rm -f "$CREDS" || true |
| } |
| trap cleanup EXIT |
|
|
| rm -rf "$APP_DIR" |
| mkdir -p "$APP_DIR" |
|
|
| |
| |
| |
| |
| umask 077 |
| printf 'https://%s:%s@%s\n' "$GIT_USERNAME" "$GIT_TOKEN" "$GIT_HOST" > "$CREDS" |
|
|
| git config --global credential.helper "store --file=$CREDS" |
|
|
| |
| |
| |
| git clone --depth 1 "$GIT_REPO_URL" "$APP_DIR" |
|
|
| |
| rm -f "$CREDS" |
| git config --global --unset credential.helper || true |
|
|
| |
| |
| |
| cd "$APP_DIR" |
|
|
| python -m pip install --no-cache-dir -r requirements.txt |
|
|
| exec python -m uvicorn app:app \ |
| --host 0.0.0.0 \ |
| --port "${PORT:-7860}" |
