Reapply "v 1.0.7 添加前端自动部署"

This reverts commit dcdf7cc.

Author: yyyCode

.gitattributes

@@ -1,2 +1,3 @@
 /mvnw text eol=lf
+*.sh text eol=lf
 *.cmd text eol=crlf

.github/workflows/ci.yml

@@ -0,0 +1,72 @@
+# OpenBlog：push 到 master 时编译后端、打包前端，并将静态资源与 Docker 相关文件同步到阿里云，在服务器执行 docker.sh 更新 Nginx 容器。
+# 需在仓库 Settings → Secrets and variables → Actions 中配置：
+#   SERVER_SSH_KEY      服务器 SSH 私钥（完整 PEM）
+#   SERVER_REMOTE_HOST  公网 IP 或域名
+#   SERVER_REMOTE_USER  SSH 登录用户（如 root 或 deploy）
+#   SERVER_TARGET       服务器上部署目录绝对路径（如 /opt/openblog/web），该目录下会有 dist、Dockerfile、docker.sh、nginx.conf
+#
+# 后端 Spring Boot 需在**同一台机器宿主机**上监听 8082（java -jar 或 systemd），容器内 Nginx 通过 host.docker.internal 反代到宿主机。
+name: Build and deploy OpenBlog
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: "17"
+          distribution: "temurin"
+          cache: "maven"
+
+      - name: Build backend (Maven)
+        run: mvn -B -ntp package -DskipTests
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+          cache-dependency-path: frontend/package-lock.json
+
+      - name: Install frontend dependencies and build
+        working-directory: frontend
+        run: |
+          npm ci
+          npm run build
+
+      - name: Prepare release bundle for server
+        run: |
+          mkdir -p release
+          cp -r frontend/dist release/dist
+          cp frontend/Dockerfile frontend/docker.sh frontend/nginx.conf release/
+
+      - name: Deploy files to server
+        uses: easingthemes/ssh-deploy@v5.1.1
+        with:
+          SSH_PRIVATE_KEY: ${{ secrets.SERVER_SSH_KEY }}
+          ARGS: "-rlgoDzvc --delete"
+          SOURCE: "release/dist release/Dockerfile release/docker.sh release/nginx.conf"
+          REMOTE_HOST: ${{ secrets.SERVER_REMOTE_HOST }}
+          REMOTE_USER: ${{ secrets.SERVER_REMOTE_USER }}
+          TARGET: ${{ secrets.SERVER_TARGET }}
+          SCRIPT_BEFORE: ls -la
+
+      - name: Run Docker commands on server
+        uses: appleboy/ssh-action@v1
+        with:
+          host: ${{ secrets.SERVER_REMOTE_HOST }}
+          username: ${{ secrets.SERVER_REMOTE_USER }}
+          key: ${{ secrets.SERVER_SSH_KEY }}
+          script: |
+            cd ${{ secrets.SERVER_TARGET }}
+            sh docker.sh

frontend/Dockerfile

@@ -0,0 +1,4 @@
+FROM nginx:alpine
+COPY dist /usr/share/nginx/html
+EXPOSE 80
+CMD ["nginx", "-g", "daemon off;"]

frontend/docker.sh

@@ -0,0 +1,18 @@
+#!/bin/sh
+set -e
+DIR="$(cd "$(dirname "$0")" && pwd)"
+NAME="openblog-web"
+
+docker stop "$NAME" 2>/dev/null || true
+docker rm "$NAME" 2>/dev/null || true
+docker rmi "$NAME" 2>/dev/null || true
+
+docker build -t "$NAME" "$DIR"
+
+docker run -d \
+  -p 80:80 \
+  --name "$NAME" \
+  --add-host=host.docker.internal:host-gateway \
+  --restart on-failure:5 \
+  -v "$DIR/nginx.conf:/etc/nginx/conf.d/default.conf:ro" \
+  "$NAME"

frontend/nginx.conf

@@ -0,0 +1,29 @@
+# 容器内 Nginx：静态资源 + 将 /api 反代到宿主机 Spring Boot（默认 8082）。
+# 依赖 docker.sh 中的 --add-host=host.docker.internal:host-gateway
+
+server {
+    listen 80;
+    server_name _;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    location = /favicon.ico {
+        alias /usr/share/nginx/html/favicon.svg;
+        default_type image/svg+xml;
+        access_log off;
+    }
+
+    location ^~ /api/ {
+        proxy_pass http://host.docker.internal:8082;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}