ci: deploy with desu-deploy

.github/workflows/publish.yaml

@@ -1,11 +1,17 @@
-name: Release - Tag and publish Docker image
+name: Publish and deploy
 
 on:
   push: 
     branches: [ main ]
+  workflow_dispatch:
+
+concurrency:
+  group: deploy
+  cancel-in-progress: true
 
 jobs:
-  create_release: 
+  publish: 
+    if: github.repository == 'teidesu/tei.su' # do not run on forks
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -47,3 +53,14 @@ jobs:
           platforms: linux/amd64,linux/arm64
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+
+  deploy:
+    runs-on: ubuntu-latest
+    needs: publish
+    steps:
+      - uses: teidesu/desu-deploy@main
+        with:
+          key: ${{ secrets.DEPLOY_KEY }}
+          server: ${{ secrets.DEPLOY_SERVER }}
+          wireguard: ${{ secrets.DEPLOY_WG }}
+          service: teisu