ISMAIL MASSERAN
136 lines
4.4 KiB
YAML
136 lines
4.4 KiB
YAML
name: Deploy to Production
|
|
|
|
# Manual production deploy — pulls pre-built images from the registry
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
image_tag:
|
|
description: "Docker image tag to deploy (commit SHA or version tag, e.g. v1.0.0)"
|
|
required: true
|
|
default: "latest"
|
|
type: string
|
|
|
|
env:
|
|
BACKEND_IMAGE: git.koppkb.com/kopkb/my-kopkb-be
|
|
FRONTEND_IMAGE: git.koppkb.com/kopkb/my-kopkb-fe
|
|
DEPLOY_DIR: /home/arrahn/Project
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: host
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ inputs.image_tag }}
|
|
|
|
- name: Login to Docker registry
|
|
run: |
|
|
echo "${{ secrets.REGISTRY_PASSWORD }}" | \
|
|
docker login git.koppkb.com \
|
|
-u "${{ secrets.REGISTRY_USERNAME }}" \
|
|
--password-stdin
|
|
|
|
- name: Verify images exist in registry
|
|
run: |
|
|
set -e
|
|
IMAGE_TAG="${{ inputs.image_tag }}"
|
|
|
|
for IMAGE in "${BACKEND_IMAGE}:${IMAGE_TAG}" "${FRONTEND_IMAGE}:${IMAGE_TAG}"; do
|
|
echo "Checking if image exists: ${IMAGE}"
|
|
if ! docker manifest inspect "${IMAGE}" > /dev/null 2>&1; then
|
|
echo "ERROR: Image ${IMAGE} does not exist in registry!"
|
|
exit 1
|
|
fi
|
|
echo "✓ ${IMAGE} found"
|
|
done
|
|
|
|
- name: Pull Docker images
|
|
run: |
|
|
set -e
|
|
IMAGE_TAG="${{ inputs.image_tag }}"
|
|
docker pull "${BACKEND_IMAGE}:${IMAGE_TAG}"
|
|
docker pull "${FRONTEND_IMAGE}:${IMAGE_TAG}"
|
|
echo "✓ Images pulled successfully"
|
|
|
|
- name: Sync compose file and deploy
|
|
run: |
|
|
set -e
|
|
IMAGE_TAG="${{ inputs.image_tag }}"
|
|
|
|
mkdir -p "${DEPLOY_DIR}"
|
|
cp be/docker/production/docker-compose.production.yml "${DEPLOY_DIR}/docker-compose.yml"
|
|
|
|
# nginx config is mounted from repo checkout path on each deploy
|
|
NGINX_CONF="$(pwd)/be/docker/production/nginx/nginx.conf"
|
|
if [ ! -f "${NGINX_CONF}" ]; then
|
|
echo "ERROR: nginx config not found at ${NGINX_CONF}"
|
|
exit 1
|
|
fi
|
|
|
|
cd "${DEPLOY_DIR}"
|
|
|
|
if [ ! -f .env ]; then
|
|
echo "ERROR: ${DEPLOY_DIR}/.env is missing on the server"
|
|
exit 1
|
|
fi
|
|
|
|
export IMAGE_TAG
|
|
export NGINX_CONF
|
|
|
|
docker compose -f docker-compose.yml pull backend frontend
|
|
docker compose -f docker-compose.yml up -d --remove-orphans
|
|
|
|
echo "✓ Deployed IMAGE_TAG=${IMAGE_TAG}"
|
|
|
|
- name: Verify deployment
|
|
run: |
|
|
set -e
|
|
cd "${DEPLOY_DIR}"
|
|
|
|
echo "Waiting for services to start..."
|
|
sleep 10
|
|
|
|
for SERVICE in backend frontend; do
|
|
STATUS=$(docker compose -f docker-compose.yml ps --status running --format '{{.Name}}' "$SERVICE" 2>/dev/null || true)
|
|
if [ -z "$STATUS" ]; then
|
|
echo "ERROR: ${SERVICE} is not running"
|
|
docker compose -f docker-compose.yml ps
|
|
docker compose -f docker-compose.yml logs --tail=50 "$SERVICE" || true
|
|
exit 1
|
|
fi
|
|
echo "✓ ${SERVICE} is running (${STATUS})"
|
|
done
|
|
|
|
BE_CONTAINER=$(docker compose -f docker-compose.yml ps -q backend)
|
|
if docker exec "$BE_CONTAINER" test -f /var/www/.env; then
|
|
echo "✓ Backend .env file exists"
|
|
else
|
|
echo "WARNING: Backend .env file not found"
|
|
fi
|
|
|
|
API_PORT=$(grep -E '^API_PORT=' .env 2>/dev/null | cut -d= -f2- | tr -d '"' || true)
|
|
FE_PORT=$(grep -E '^FE_PORT=' .env 2>/dev/null | cut -d= -f2- | tr -d '"' || true)
|
|
API_PORT=${API_PORT:-8080}
|
|
FE_PORT=${FE_PORT:-8081}
|
|
|
|
check_health() {
|
|
NAME=$1
|
|
URL=$2
|
|
for i in 1 2 3 4 5 6; do
|
|
if curl -sf "$URL" > /dev/null; then
|
|
echo "✓ ${NAME} health check passed (${URL})"
|
|
return 0
|
|
fi
|
|
echo "Waiting for ${NAME}... attempt ${i}/6"
|
|
sleep 5
|
|
done
|
|
echo "ERROR: ${NAME} health check failed (${URL})"
|
|
docker compose -f docker-compose.yml logs --tail=50 "${NAME}" || true
|
|
return 1
|
|
}
|
|
|
|
check_health "backend" "http://127.0.0.1:${API_PORT}/health"
|
|
check_health "frontend" "http://127.0.0.1:${FE_PORT}/health"
|