[skip ci] chore: cleanup workflows

.github/workflows/deploy-static-proxy.yaml

@@ -5,9 +5,9 @@ on:
     branches:
       - main
     paths:
-      - fluxer_media_proxy/**/*
+      - fluxer_media_proxy/**
       - .github/workflows/deploy-static-proxy.yaml
-  workflow_dispatch:
+  workflow_dispatch: {}
 
 concurrency:
   group: deploy-fluxer-static-proxy
@@ -30,6 +30,13 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
+      - name: Record deploy commit
+        run: |
+          set -euo pipefail
+          sha=$(git rev-parse HEAD)
+          echo "Deploying commit ${sha}"
+          printf 'DEPLOY_SHA=%s\n' "$sha" >> "$GITHUB_ENV"
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
@@ -44,7 +51,7 @@ jobs:
         with:
           context: ${{ env.CONTEXT_DIR }}
           file: ${{ env.CONTEXT_DIR }}/Dockerfile
-          tags: ${{ env.IMAGE_NAME }}:${{ github.sha }}
+          tags: ${{ env.IMAGE_NAME }}:${{ env.DEPLOY_SHA }}
           load: true
           platforms: linux/amd64
           cache-from: type=gha,scope=${{ env.SERVICE_NAME }}
@@ -74,19 +81,19 @@ jobs:
 
       - name: Push image and deploy
         env:
-          IMAGE_TAG: ${{ env.IMAGE_NAME }}:${{ github.sha }}
+          IMAGE_TAG: ${{ env.IMAGE_NAME }}:${{ env.DEPLOY_SHA }}
           SERVER: ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_IP }}
         run: |
           set -euo pipefail
-          docker pussh ${IMAGE_TAG} ${SERVER}
+          docker pussh "${IMAGE_TAG}" "${SERVER}"
 
-          ssh ${SERVER} "IMAGE_TAG=${IMAGE_TAG} SERVICE_NAME=${SERVICE_NAME} COMPOSE_STACK=${COMPOSE_STACK}" bash << 'EOF'
-            set -euo pipefail
-            sudo mkdir -p /opt/${SERVICE_NAME}
-            sudo chown -R ${USER}:${USER} /opt/${SERVICE_NAME}
-            cd /opt/${SERVICE_NAME}
+          ssh "${SERVER}" "IMAGE_TAG=${IMAGE_TAG} SERVICE_NAME=${SERVICE_NAME} COMPOSE_STACK=${COMPOSE_STACK} bash" << 'EOF'
+          set -euo pipefail
+          sudo mkdir -p "/opt/${SERVICE_NAME}"
+          sudo chown -R "${USER}:${USER}" "/opt/${SERVICE_NAME}"
+          cd "/opt/${SERVICE_NAME}"
 
-            cat > compose.yaml << COMPOSEEOF
+          cat > compose.yaml << COMPOSEEOF
           services:
             app:
               image: ${IMAGE_TAG}
@@ -139,6 +146,5 @@ jobs:
               external: true
           COMPOSEEOF
 
-            docker stack deploy -c compose.yaml ${COMPOSE_STACK}
-            docker service update --image ${IMAGE_TAG} fluxer-static-proxy_app
+          docker stack deploy --with-registry-auth --detach=false --resolve-image never -c compose.yaml "${COMPOSE_STACK}"
           EOF