Healix/.github/workflows/deploy.yml at main · CodeWithAkthar/Healix · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
name: Healix Deploy

on:
  push:
    branches:
      - main

jobs:
  deploy:
    runs-on: ubuntu-latest

    steps:

      # ---------------- CHECKOUT ----------------

      - name: Checkout
        uses: actions/checkout@v4


      # ---------------- NODE + PNPM ----------------

      - name: Setup pnpm
        uses: pnpm/action-setup@v2
        with:
          version: 9

      - name: Setup Node
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: pnpm


      # ---------------- INSTALL + BUILD ----------------

      - name: Install dependencies
        run: pnpm install --frozen-lockfile

      - name: Build workspace
        run: pnpm -r run build


      # ---------------- SSH SETUP ----------------

      - name: Setup SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.EC2_SSH_KEY }}" > ~/.ssh/ec2.pem
          chmod 600 ~/.ssh/ec2.pem
          ssh-keyscan -H ${{ secrets.EC2_HOST }} >> ~/.ssh/known_hosts


      # ---------------- PREPARE SERVER ----------------

      - name: Prepare directories
        run: |
          ssh -i ~/.ssh/ec2.pem ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }} << EOF

            rm -rf /var/www/frontend

            # remove only build folders (keeps .env files safe)
            rm -rf /var/www/backend/gateway/dist
            rm -rf /var/www/backend/services

            mkdir -p /var/www/backend/gateway/dist
            mkdir -p /var/www/backend/services

            mkdir -p /var/www/frontend
            mkdir -p /var/www/frontend/.next/static
            mkdir -p /var/www/frontend/public

          EOF


      # ---------------- DEPLOY GATEWAY ----------------

      - name: Deploy Gateway
        run: |
          rsync -avz \
            -e "ssh -i ~/.ssh/ec2.pem" \
            gateway/dist/ \
            ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:/var/www/backend/gateway/dist/

          rsync -avz \
            -e "ssh -i ~/.ssh/ec2.pem" \
            gateway/package.json \
            ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:/var/www/backend/gateway/


      # ---------------- DEPLOY SERVICES ----------------

      - name: Deploy Services
        run: |
          rsync -avz --delete \
            -e "ssh -i ~/.ssh/ec2.pem" \
            services/ \
            ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:/var/www/backend/services/


      # ---------------- DEPLOY NEXTJS ----------------

      - name: Deploy Next standalone
        run: |
          rsync -avz \
            -e "ssh -i ~/.ssh/ec2.pem" \
            frontend/web/.next/standalone/ \
            ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:/var/www/frontend/


      - name: Deploy Next static
        run: |
          rsync -avz \
            -e "ssh -i ~/.ssh/ec2.pem" \
            frontend/web/.next/static/ \
            ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:/var/www/frontend/.next/static/


      - name: Deploy public assets
        run: |
          rsync -avz \
            -e "ssh -i ~/.ssh/ec2.pem" \
            frontend/web/public/ \
            ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:/var/www/frontend/public/


      # ---------------- FIX MONOREPO NEXT STRUCTURE ----------------

      - name: Fix standalone structure
        run: |
          ssh -i ~/.ssh/ec2.pem ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }} << EOF

            if [ -d "/var/www/frontend/frontend/web" ]; then
              rsync -a /var/www/frontend/frontend/web/ /var/www/frontend/
              rm -rf /var/www/frontend/frontend
            fi

          EOF


      # ---------------- RESTART SERVICES ----------------

      - name: Restart services
        run: |
          ssh -i ~/.ssh/ec2.pem ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }} << 'EOF'

            echo "Restarting gateway..."

            cd /var/www/backend/gateway
            pnpm install --prod
            pm2 reload gateway || pm2 start dist/server.js --name gateway


            echo "Restarting services..."

            for dir in /var/www/backend/services/*; do
              cd "$dir"
              name=$(basename "$dir")

              pnpm install --prod

              if [ -f "dist/server.js" ]; then
                pm2 reload "$name" || pm2 start dist/server.js --name "$name"
              fi
            done


            echo "Restarting frontend..."

            cd /var/www/frontend
            pnpm install --prod
            pm2 reload frontend || PORT=3000 pm2 start server.js --name frontend


            pm2 save

          EOF