From eb49671d957a337c5eca26320bfa94bff1f1022a Mon Sep 17 00:00:00 2001
From: Ujang Sopiyan <ujangsp11@gmail.com>
Date: Tue, 19 Aug 2025 21:01:10 +0700
Subject: [PATCH 1/3] feat: [deploy siappakai]

---
 .github/workflows/deploy_siappakai.yml | 35 ++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 .github/workflows/deploy_siappakai.yml

diff --git a/.github/workflows/deploy_siappakai.yml b/.github/workflows/deploy_siappakai.yml
new file mode 100644
index 0000000..72287fd
--- /dev/null
+++ b/.github/workflows/deploy_siappakai.yml
@@ -0,0 +1,35 @@
+name: Deploy SiapPakai Update OpenSID API with Ansible
+
+on:
+  pull_request:
+    branches: [master]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: deploy-opensid-api-rilis
+  cancel-in-progress: true
+
+jobs:
+  deploy:
+    # rilis dari branch 'master' & bukan prerelease
+    # if: github.event.release.target_commitish == 'master' && github.event.release.prerelease == false
+    name: Deploy SiapPakai Update OpenSID API ke Server SiapPakai
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Ansible Code
+        uses: actions/checkout@v3
+
+      - name: Deploy via SSH using appleboy/ssh-action
+        uses: appleboy/ssh-action@v1.2.0
+        with:
+          host: ${{ secrets.CICD_SERVER_IP }}
+          username: ${{ secrets.CICD_SERVER_USER }}
+          key: ${{ secrets.CICD_SERVER_PRIVATE_KEY }}
+          port: ${{ secrets.CICD_SERVER_PORT }}
+          script: |
+            set -euo pipefail
+            cd ${{ secrets.CICD_SERVER_PATH }}
+            ansible-playbook -i inventories/production/inventory.yml playbooks/siappakai-update-opensid-api.yml --vault-password-file ~/.vault_pass.txt

From 414cfcf343f5da83dc0e9d452cb261ce1161bcb8 Mon Sep 17 00:00:00 2001
From: Ujang Sopiyan <ujangsp11@gmail.com>
Date: Wed, 20 Aug 2025 10:51:04 +0700
Subject: [PATCH 2/3] modify: [deploy siappakai] tambahkan nohup

---
 .github/workflows/deploy_siappakai.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/deploy_siappakai.yml b/.github/workflows/deploy_siappakai.yml
index 72287fd..20e5f33 100644
--- a/.github/workflows/deploy_siappakai.yml
+++ b/.github/workflows/deploy_siappakai.yml
@@ -32,4 +32,5 @@ jobs:
           script: |
             set -euo pipefail
             cd ${{ secrets.CICD_SERVER_PATH }}
-            ansible-playbook -i inventories/production/inventory.yml playbooks/siappakai-update-opensid-api.yml --vault-password-file ~/.vault_pass.txt
+            nohup ansible-playbook -i inventories/production/inventory.yml playbooks/siappakai-update-opensid-api.yml --vault-password-file ~/.vault_pass.txt > /tmp/ansible-opensid.log 2>&1 &
+            echo "Ansible playbook started in background. Check /tmp/ansible-opensid.log for output."

From 450e49f975c3877796c9a6bb853f11d33f89d351 Mon Sep 17 00:00:00 2001
From: Ujang Sopiyan <ujangsp11@gmail.com>
Date: Wed, 20 Aug 2025 11:00:40 +0700
Subject: [PATCH 3/3] done: [deploy siappakai] jalan dibackground

---
 .github/workflows/deploy_siappakai.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/deploy_siappakai.yml b/.github/workflows/deploy_siappakai.yml
index 20e5f33..dd9127e 100644
--- a/.github/workflows/deploy_siappakai.yml
+++ b/.github/workflows/deploy_siappakai.yml
@@ -1,8 +1,8 @@
 name: Deploy SiapPakai Update OpenSID API with Ansible
 
 on:
-  pull_request:
-    branches: [master]
+  release:
+    types: [published]
 
 permissions:
   contents: read
@@ -14,7 +14,7 @@ concurrency:
 jobs:
   deploy:
     # rilis dari branch 'master' & bukan prerelease
-    # if: github.event.release.target_commitish == 'master' && github.event.release.prerelease == false
+    if: github.event.release.target_commitish == 'master' && github.event.release.prerelease == false
     name: Deploy SiapPakai Update OpenSID API ke Server SiapPakai
     runs-on: ubuntu-latest