Release Pipeline #8
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release Pipeline | |
| on: | |
| release: | |
| types: | |
| - published | |
| jobs: | |
| build-push-deploy-backend: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| steps: | |
| # Checkout the repository | |
| - name: Checkout Code | |
| uses: actions/checkout@v3 | |
| # Log in to GitHub Container Registry | |
| - name: Log in to GitHub Container Registry | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| # Build and push the Docker image | |
| - name: Build and Push Docker Image | |
| working-directory: ./backend | |
| env: | |
| VERSION: ${{ github.event.release.tag_name }} | |
| run: | | |
| # Build the Docker image | |
| docker build -t ghcr.io/ikapiar/backend:${VERSION} . | |
| docker tag ghcr.io/ikapiar/backend:${VERSION} ghcr.io/ikapiar/backend:latest | |
| # Push the Docker image | |
| docker push ghcr.io/ikapiar/backend:${VERSION} | |
| docker push ghcr.io/ikapiar/backend:latest | |
| - name: Populate Env for backend | |
| working-directory: ./backend | |
| env: | |
| APP_ENV: production | |
| DB_URI: ${{ secrets.DB_URI }} | |
| JWT_PRIVATE_KEY_BASE64: ${{ secrets.JWT_PRIVATE_KEY_BASE64 }} | |
| JWT_PUBLIC_KEY_BASE64: ${{ secrets.JWT_PUBLIC_KEY_BASE64 }} | |
| PASSWORD_SALT: ${{ secrets.PASSWORD_SALT }} | |
| APP_ENV_FILE_PATH: ./deploy/env | |
| run: | | |
| echo APP_ENV="$APP_ENV" > "$APP_ENV_FILE_PATH" | |
| echo DB_URI="$DB_URI" >> "$APP_ENV_FILE_PATH" | |
| echo JWT_PRIVATE_KEY_BASE64="$JWT_PRIVATE_KEY_BASE64" >> "$APP_ENV_FILE_PATH" | |
| echo JWT_PUBLIC_KEY_BASE64="$JWT_PUBLIC_KEY_BASE64" >> "$APP_ENV_FILE_PATH" | |
| echo PASSWORD_SALT="$PASSWORD_SALT" >> "$APP_ENV_FILE_PATH" | |
| - name: Sync Systemd Unit Backend | |
| working-directory: ./backend | |
| env: | |
| HOSTNAME: ${{ secrets.HOSTNAME }} | |
| PORT: ${{ secrets.PORT }} | |
| KEY: ${{ secrets.KEY }} | |
| USERNAME: ${{ secrets.USERNAME }} | |
| run: | | |
| # Save SSH key to a temporary file | |
| echo "$KEY" > /tmp/deploy_key | |
| chmod 600 /tmp/deploy_key | |
| # Use rsync to deploy static files | |
| rsync -avz -e "ssh -p $PORT -i /tmp/deploy_key -o StrictHostKeyChecking=no" ./deploy/ "$USERNAME@$HOSTNAME:/apps/ikapiar-backend" | |
| # Clean up the temporary key | |
| rm -f /tmp/deploy_key | |
| - name: Restart Systemd Unit Backend | |
| env: | |
| HOSTNAME: ${{ secrets.HOSTNAME }} | |
| PORT: ${{ secrets.PORT }} | |
| KEY: ${{ secrets.KEY }} | |
| USERNAME: ${{ secrets.USERNAME }} | |
| run: | | |
| # Save SSH key to a temporary file | |
| echo "$KEY" > /tmp/deploy_key | |
| chmod 600 /tmp/deploy_key | |
| ssh -p $PORT -i /tmp/deploy_key -o StrictHostKeyChecking=no $USERNAME@$HOSTNAME "/bin/bash /apps/ikapiar-backend/container-ikapiar-pre.sh && sudo systemctl daemon-reload && sudo systemctl stop container-ikapiar-backend && sudo systemctl enable --now container-ikapiar-backend" | |
| # Clean up the temporary key | |
| rm -f /tmp/deploy_key | |
| build-and-deploy-frontend: | |
| runs-on: ubuntu-latest | |
| steps: | |
| # Checkout the repository | |
| - name: Checkout Code | |
| uses: actions/checkout@v3 | |
| # Set up Node.js environment | |
| - name: Setup Node.js | |
| uses: actions/setup-node@v3 | |
| with: | |
| node-version: 18 # Adjust based on your project requirements | |
| # Install dependencies and build frontend | |
| - name: Install and Build Frontend | |
| working-directory: ./frontend | |
| run: | | |
| npm install | |
| npm run build | |
| # Deploy built static files using rsync | |
| - name: Deploy Frontend to Server | |
| env: | |
| HOSTNAME: ${{ secrets.HOSTNAME }} | |
| PORT: ${{ secrets.PORT }} | |
| KEY: ${{ secrets.KEY }} | |
| USERNAME: ${{ secrets.USERNAME }} | |
| run: | | |
| # Save SSH key to a temporary file | |
| echo "$KEY" > /tmp/deploy_key | |
| chmod 600 /tmp/deploy_key | |
| # Use rsync to deploy static files | |
| rsync -avz -e "ssh -p $PORT -i /tmp/deploy_key -o StrictHostKeyChecking=no" ./frontend/out/ "$USERNAME@$HOSTNAME:/var/www/ikapiar" | |
| # Clean up the temporary key | |
| rm -f /tmp/deploy_key |