Added workflow file

2026-09-10 20:09:49 +02:00
parent 7d49e671d7
commit 7949e91048
1 changed files with 163 additions and 0 deletions
@@ -0,0 +1,163 @@
+name: Remote Deployment Pipeline
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    types: [opened, synchronize, reopened, closed]
+
+env:
+  # --- PATH CONFIGURATION ---
+  REMOTE_DEPLOY_PATH: /var/app/nextcloud/test
+  # REMOTE_PROD_PATH: /var/app/nextcloud/prod
+  REMOTE_PREPROD_PATH: /var/app/nextcloud/preprod
+
+  # --- SECRETS ---
+  SSH_HOST: ${{ secrets.SSH_HOST }}
+  SSH_USER: ${{ secrets.SSH_USER }}
+  SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
+  SSH_PORT: ${{ secrets.SSH_PORT || 22 }}
+
+jobs:
+  # ------------------------------------------------------------------
+  # STAGE 1: PREPARE CONTEXT
+  # ------------------------------------------------------------------
+  prepare_context:
+    name: Prepare Context
+    runs-on: ubuntu-latest
+    outputs:
+      pr_path: ${{ steps.calc.outputs.pr_path }}
+    steps:
+      - id: calc
+        name: Prepare Context
+        run: |
+          REPO_NAME=$(echo "${{ github.repository }}" | cut -d '/' -f 2)
+          if [[ "${{ github.event_name }}" == "pull_request" ]]; then
+            echo "pr_path=${REMOTE_DEPLOY_PATH}/${REPO_NAME}-pr-${{ github.event.pull_request.number }}" >> $GITHUB_OUTPUT
+          fi
+
+  # ------------------------------------------------------------------
+  # STAGE 2: DEPLOY PREVIEW (DEV)
+  # ------------------------------------------------------------------
+  deploy_preview:
+    name: Deploy (Dev/Preview)
+    runs-on: ubuntu-latest
+    needs: [prepare_context]
+    if: github.event_name == 'pull_request' && github.event.action != 'closed'
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+
+      - name: Deploy via Rsync & Docker
+        uses: easingthemes/ssh-deploy@2cc5b27bf3029d0455dd5e09fe02633904031447 # v6.0.3
+        env:
+          SSH_PRIVATE_KEY: ${{ env.SSH_PRIVATE_KEY }}
+          REMOTE_HOST: ${{ env.SSH_HOST }}
+          REMOTE_USER: ${{ env.SSH_USER }}
+          REMOTE_PORT: ${{ env.SSH_PORT }}
+          TARGET: ${{ needs.prepare_context.outputs.pr_path }}
+          # Exclude git internals to save bandwidth
+          EXCLUDE: ".git/, .github/"
+          # 1. Create directory first
+          SCRIPT_BEFORE: |
+            mkdir -p ${{ needs.prepare_context.outputs.pr_path }}
+          # 2. Run Docker Compose after sync
+          SCRIPT_AFTER: |
+            set -e
+            cd ${{ needs.prepare_context.outputs.pr_path }}
+            docker compose -f docker-compose.yaml up -d --build --remove-orphans --wait
+
+    # ------------------------------------------------------------------
+  # STAGE 3.5: DEPLOY PRE-PROD
+  # ------------------------------------------------------------------
+  deploy_preprod:
+    name: Deploy (Pre-Prod)
+    runs-on: ubuntu-latest
+    needs: [deploy_staging]
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+
+      - name: Deploy via Rsync & Docker
+        uses: easingthemes/ssh-deploy@2cc5b27bf3029d0455dd5e09fe02633904031447 # v6.0.3
+        env:
+          SSH_PRIVATE_KEY: ${{ env.SSH_PRIVATE_KEY }}
+          REMOTE_HOST: ${{ env.SSH_HOST }}
+          REMOTE_USER: ${{ env.SSH_USER }}
+          REMOTE_PORT: ${{ env.SSH_PORT }}
+          TARGET: ${{ env.REMOTE_PREPROD_PATH }}
+          EXCLUDE: ".git/, .github/"
+          SCRIPT_BEFORE: |
+            mkdir -p ${{ env.REMOTE_PREPROD_PATH }}
+          SCRIPT_AFTER: |
+            set -e
+            cd ${{ env.REMOTE_PREPROD_PATH }}
+            docker compose -f docker-compose.yaml up -d --build --remove-orphans --wait
+
+    # # ------------------------------------------------------------------
+  # # STAGE 4: DEPLOY PRODUCTION
+  # # ------------------------------------------------------------------
+  # deploy_prod:
+  #   name: Deploy (Production)
+  #   runs-on: ubuntu-latest
+  #   needs: [deploy_preprod]
+  #   if: github.ref == 'refs/heads/main'
+  #   steps:
+  #     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+
+  #     - name: Deploy via Rsync & Docker
+  #       uses: easingthemes/ssh-deploy@2cc5b27bf3029d0455dd5e09fe02633904031447 # v6.0.3
+  #       env:
+  #         SSH_PRIVATE_KEY: ${{ env.SSH_PRIVATE_KEY }}
+  #         REMOTE_HOST: ${{ env.SSH_HOST }}
+  #         REMOTE_USER: ${{ env.SSH_USER }}
+  #         REMOTE_PORT: ${{ env.SSH_PORT }}
+  #         TARGET: ${{ env.REMOTE_PROD_PATH }}
+  #         EXCLUDE: ".git/, .github/"
+  #         SCRIPT_BEFORE: |
+  #           mkdir -p ${{ env.REMOTE_PROD_PATH }}
+  #         SCRIPT_AFTER: |
+  #           set -e
+  #           cd ${{ env.REMOTE_PROD_PATH }}
+  #           docker compose --env-file prod.env -f docker-compose.yaml -f docker-compose.prod.yaml up -d --build --remove-orphans --wait
+
+  #           # Run E2E Tests
+  #           echo "Running E2E tests..."
+  #           export CI=true
+  #           # Create venv to avoid polluting system python
+  #           python3 -m venv .venv
+  #           . .venv/bin/activate
+  #           # Export env vars so pytest can see them
+  #           set -a
+  #           . prod.env
+  #           set +a
+  #           pip install -r tests/e2e/requirements.txt
+  #           pytest tests/e2e/
+
+  # ------------------------------------------------------------------
+  # CLEANUP (Using appleboy/ssh-action for pure command execution)
+  # ------------------------------------------------------------------
+  cleanup:
+    name: Cleanup Preview
+    runs-on: ubuntu-latest
+    needs: [prepare_context]
+    if: github.event_name == 'pull_request' && (github.event.action == 'closed' || github.event.pull_request.merged == true)
+    steps:
+      - name: Remove Remote Environment
+        uses: appleboy/ssh-action@0ff4204d59e8e51228ff73bce53f80d53301dee2 # v1.2.5
+        with:
+          host: ${{ env.SSH_HOST }}
+          username: ${{ env.SSH_USER }}
+          key: ${{ env.SSH_PRIVATE_KEY }}
+          port: ${{ env.SSH_PORT }}
+          script: |
+            TARGET="${{ needs.prepare_context.outputs.pr_path }}"
+            if [ -d "$TARGET" ]; then
+              cd "$TARGET"
+              docker compose down -v || true
+              cd ..
+              rm -rf "$TARGET"
+              echo "Cleanup successful"
+            else
+              echo "Directory not found, skipping."
+            fi