Merge pull request 'Added up-down workflow for easier lifecycle management' (#12) from add-up-down into main

Reviewed-on: #12

.gitea/workflows/up-down.yaml

@@ -0,0 +1,50 @@
+name: Add up down workflow
+
+on:
+  workflow_dispatch:
+    inputs:
+      action:
+        description: 'Action to perform (up or down)'
+        required: true
+        default: 'up'
+        type: choice
+        options:
+          - up
+          - down
+
+env:
+  REMOTE_PREPROD_PATH: /var/app/nextcloud/preprod
+
+  # --- SECRETS ---
+  SSH_HOST: ${{ secrets.SSH_HOST }}
+  SSH_USER: ${{ secrets.SSH_USER }}
+  SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
+  SSH_PORT: ${{ secrets.SSH_PORT || 22 }}
+
+jobs:
+    # ------------------------------------------------------------------
+  # STAGE 3.5: DEPLOY PRE-PROD
+  # ------------------------------------------------------------------
+  up_down_preprod:
+    name: Up/Down (Pre-Prod)
+    runs-on: ubuntu-latest
+    # if: github.ref == 'refs/heads/main'
+    steps:
+      - name: Up/Down Remote Environment
+        uses: appleboy/ssh-action@0ff4204d59e8e51228ff73bce53f80d53301dee2 # v1.2.5
+        with:
+          host: ${{ env.SSH_HOST }}
+          username: ${{ env.SSH_USER }}
+          key: ${{ env.SSH_PRIVATE_KEY }}
+          port: ${{ env.SSH_PORT }}
+          script: |
+            set -e
+            cd ${{ env.REMOTE_PREPROD_PATH }}
+            if [ "${{ github.event.inputs.action }}" = "up" ]; then
+              docker compose -f docker-compose.yml up -d --build --remove-orphans --wait
+            elif [ "${{ github.event.inputs.action }}" = "down" ]; then
+              docker compose -f docker-compose.yml down || true
+            else
+              echo "Invalid action: ${{ github.event.inputs.action }}. Use 'up' or 'down'."
+              exit 1
+            fi

.gitea/workflows/workflow.yaml

@@ -92,6 +92,22 @@ jobs:
             set -e
             cd ${{ env.REMOTE_PREPROD_PATH }}
             docker compose -f docker-compose.yml up -d --build --remove-orphans --wait
+  stop_preprod:
+    name: Stop Pre-Prod
+    runs-on: ubuntu-latest
+    needs: [deploy_preprod]
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - name: Remove Remote Environment
+        uses: appleboy/ssh-action@0ff4204d59e8e51228ff73bce53f80d53301dee2 # v1.2.5
+        with:
+          host: ${{ env.SSH_HOST }}
+          username: ${{ env.SSH_USER }}
+          key: ${{ env.SSH_PRIVATE_KEY }}
+          port: ${{ env.SSH_PORT }}
+          script: |
+            cd "${{ env.REMOTE_PREPROD_PATH }}"
+            docker compose down || true
 
     # # ------------------------------------------------------------------
   # # STAGE 4: DEPLOY PRODUCTION

docker-compose.yml

@@ -12,7 +12,7 @@ services:
   #     - database-connection
   db:
     # image: mysql:9.2.0
-    image: mysql:26.7.0@sha256:45abdd9b4144660b5c93a5b7d0ebb21e024f0ba9851ecb4ab43bf83c6bf83592
+    image: mysql:9.7.2@sha256:29abb0a179982e4a8928138bfc7f918af9eda64e7eeb1b1d084c1720a20159e6
     restart: always
     volumes:
       - mysql:/var/lib/mysql
@@ -23,13 +23,13 @@ services:
     environment:
       - MYSQL_RANDOM_ROOT_PASSWORD=igen
   redis:
-    image: redis:8.6.5-alpine@sha256:cd218f4b106a332c5c992e38a9480bfb9d7e9f8f7b0ec9a0023bfa36d9a408f9
+    image: redis:8.10.1-alpine@sha256:becdda6c7f4b3fb42e42fd7f120bbf5c54c4caaaf16f26da24e4563d2c1f0576
     restart: always
     networks: 
       - redis-connection
 
   app:
-    image: nextcloud:32.0.14-fpm-alpine@sha256:da1d436568cd19d73f2a08d5f11c061e419a47f1be0f6ac29b53282086a85f58 
+    image: nextcloud:32.0.15-fpm-alpine@sha256:2547a5fe6ba5f88e3831246360087cf29b051138b4a50a3223b783c20df24598 
       # image: nextcloud@sha256:e899ecc5d6b89863d06ffd6eaa3a965c7fc7fd671b38dd06f8185e1df761c7c8 
       # image: nextcloud:fpm
     restart: always
@@ -61,7 +61,7 @@ services:
   collabora:
     #    image: collabora/code:24.04.7.2.1
     # image: collabora/code:24.04.13.3.1
-    image: collabora/code:26.04.2.4.1@sha256:1f864ce3f0c49e867787b6dd303bd6ba989542d3023f6809df558eafd04c1b97
+    image: collabora/code:26.04.3.2.1@sha256:379b8f1fc955dd6d01ba24adf61d1b177048ddaae179ae8c1e6a6342daccb282
     cap_add: 
       - MKNOD
     privileged: true
@@ -138,7 +138,7 @@ services:
 
     
   cron:
-    image: nextcloud:32.0.14-fpm-alpine@sha256:da1d436568cd19d73f2a08d5f11c061e419a47f1be0f6ac29b53282086a85f58 
+    image: nextcloud:32.0.15-fpm-alpine@sha256:2547a5fe6ba5f88e3831246360087cf29b051138b4a50a3223b783c20df24598 
     # image: nextcloud@sha256:e899ecc5d6b89863d06ffd6eaa3a965c7fc7fd671b38dd06f8185e1df761c7c8 
     restart: always
     volumes:

web/Dockerfile

@@ -1,3 +1,3 @@
-FROM nginx:1.31.3-alpine@sha256:4a73073bd557c65b759505da037898b61f1be6cbcc3c2c3aeac22d2a470c1752
+FROM nginx:1.31.6-alpine@sha256:092a82dc1cb2fa653ee660f24a8f8603f55b4ea9316923f9a0d394e50714ae10
 
 COPY nginx.conf /etc/nginx/nginx.conf