ismailmasseran
507072c5ab
Co-authored-by: ISMAIL MASSERAN <topaz@ISMAILs-Macbook.local> Reviewed-on: #1
133 lines
4.2 KiB
YAML
133 lines
4.2 KiB
YAML
name: Deploy to Production
|
|
|
|
# Manual production deploy — pulls pre-built images from the registry
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
image_tag:
|
|
description: "Docker image tag to deploy (commit SHA or version tag, e.g. v1.0.0)"
|
|
required: true
|
|
default: "latest"
|
|
type: string
|
|
|
|
env:
|
|
BACKEND_IMAGE: git.koppkb.com/KoPKB/My-KOPKB-be
|
|
FRONTEND_IMAGE: git.koppkb.com/KoPKB/My-KOPKB-fe
|
|
DEPLOY_DIR: /home/arrahn/Project
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: host
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ inputs.image_tag }}
|
|
|
|
- name: Login to Docker registry
|
|
run: |
|
|
echo "${{ secrets.REGISTRY_PASSWORD }}" | \
|
|
docker login git.koppkb.com \
|
|
-u "${{ secrets.REGISTRY_USERNAME }}" \
|
|
--password-stdin
|
|
|
|
- name: Verify images exist in registry
|
|
run: |
|
|
set -e
|
|
IMAGE_TAG="${{ inputs.image_tag }}"
|
|
|
|
for IMAGE in "${BACKEND_IMAGE}:${IMAGE_TAG}" "${FRONTEND_IMAGE}:${IMAGE_TAG}"; do
|
|
echo "Checking if image exists: ${IMAGE}"
|
|
if ! docker manifest inspect "${IMAGE}" > /dev/null 2>&1; then
|
|
echo "ERROR: Image ${IMAGE} does not exist in registry!"
|
|
exit 1
|
|
fi
|
|
echo "✓ ${IMAGE} found"
|
|
done
|
|
|
|
- name: Pull Docker images
|
|
run: |
|
|
set -e
|
|
IMAGE_TAG="${{ inputs.image_tag }}"
|
|
docker pull "${BACKEND_IMAGE}:${IMAGE_TAG}"
|
|
docker pull "${FRONTEND_IMAGE}:${IMAGE_TAG}"
|
|
echo "✓ Images pulled successfully"
|
|
|
|
- name: Sync compose file and deploy
|
|
run: |
|
|
set -e
|
|
IMAGE_TAG="${{ inputs.image_tag }}"
|
|
|
|
mkdir -p "${DEPLOY_DIR}"
|
|
cp be/docker/production/docker-compose.production.yml "${DEPLOY_DIR}/docker-compose.yml"
|
|
|
|
# nginx config is mounted from repo checkout path on each deploy
|
|
NGINX_CONF="$(pwd)/be/docker/production/nginx/nginx.conf"
|
|
if [ ! -f "${NGINX_CONF}" ]; then
|
|
echo "ERROR: nginx config not found at ${NGINX_CONF}"
|
|
exit 1
|
|
fi
|
|
|
|
cd "${DEPLOY_DIR}"
|
|
|
|
if [ ! -f .env.production ]; then
|
|
echo "ERROR: ${DEPLOY_DIR}/.env.production is missing on the server"
|
|
exit 1
|
|
fi
|
|
|
|
# Optional compose-level env (REDIS_PASSWORD, API_PORT, FE_PORT, etc.)
|
|
if [ -f .env ]; then
|
|
set -a
|
|
# shellcheck disable=SC1091
|
|
source .env
|
|
set +a
|
|
fi
|
|
|
|
export IMAGE_TAG
|
|
export NGINX_CONF
|
|
|
|
docker compose -f docker-compose.yml pull backend frontend
|
|
docker compose -f docker-compose.yml up -d --remove-orphans
|
|
|
|
echo "✓ Deployed IMAGE_TAG=${IMAGE_TAG}"
|
|
|
|
- name: Verify deployment
|
|
run: |
|
|
set -e
|
|
echo "Waiting for services to start..."
|
|
sleep 15
|
|
|
|
cd "${DEPLOY_DIR}"
|
|
|
|
for SERVICE in backend frontend; do
|
|
STATUS=$(docker compose -f docker-compose.yml ps --status running --format '{{.Name}}' "$SERVICE" 2>/dev/null || true)
|
|
if [ -z "$STATUS" ]; then
|
|
echo "ERROR: ${SERVICE} is not running"
|
|
docker compose -f docker-compose.yml ps
|
|
docker compose -f docker-compose.yml logs --tail=50 "$SERVICE" || true
|
|
exit 1
|
|
fi
|
|
echo "✓ ${SERVICE} is running (${STATUS})"
|
|
done
|
|
|
|
BE_CONTAINER=$(docker compose -f docker-compose.yml ps -q backend)
|
|
if docker exec "$BE_CONTAINER" test -f /var/www/.env; then
|
|
echo "✓ Backend .env file exists"
|
|
else
|
|
echo "WARNING: Backend .env file not found"
|
|
fi
|
|
|
|
if docker exec "$BE_CONTAINER" curl -sf http://localhost/health > /dev/null; then
|
|
echo "✓ Backend health check passed"
|
|
else
|
|
echo "WARNING: Backend health check failed"
|
|
fi
|
|
|
|
FE_CONTAINER=$(docker compose -f docker-compose.yml ps -q frontend)
|
|
if docker exec "$FE_CONTAINER" wget -q --spider http://localhost/; then
|
|
echo "✓ Frontend health check passed"
|
|
else
|
|
echo "WARNING: Frontend health check failed"
|
|
fi
|