cioos-siooc/CIOOS Deploy Docker Compose

Deploy a Docker Compose project to a remote server over WireGuard VPN

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit May 13, 2026
License
None

Pinned Snippet

workflow.ymlSHA-pinned
uses: cioos-siooc/cioos-deploy-docker-compose@7cdad8f8b48335ae8c8d79baab7dd7667c785581 # no releases — HEAD as of 2026-07-11

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
wireguard_interfaceWireGuard interface namenowg0
wg_configFull WireGuard config file contentno""
ssh_hostRemote SSH hostyes
ssh_portRemote SSH portno22
ssh_usernameRemote SSH usernameyes
ssh_keySSH private key for remote connectionyes
deploy_pathRemote path where the project gets deployedyes
stack_nameDocker Compose stack/project nameyes
compose_filesSpace-separated list of docker compose files (e.g. 'docker-compose.yml docker-compose.prod.yml')nodocker-compose.yml
op_secret_filesSpace-separated list of files to inject 1Password secrets into. Use 'source:destination' to rename (e.g. '.env.tpl:.env'), or just 'file' to inject in place.no""
op_service_account_token1Password service account tokenno""
git_shaExact commit SHA to deploy (defaults to GITHUB_SHA)no""
docker_compose_downRun docker compose down before upnofalse
submodulesInitialize and update git submodules recursively after cloning/pullingnofalse
env_overridesNewline-separated KEY=VALUE pairs appended to .env after 1Password injection. Use this to inject GitHub Actions variables or secrets into the deployment environment.no""

no outputs