deployment.yaml

---
name: Deployment
on:
  push:
    branches:
      - master
  workflow_dispatch:
jobs:
  test:
    name: Test
    uses: ./.github/workflows/reusable_test.yaml
    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}
      cancel-in-progress: true
  build:
    name: Build
    runs-on: ubuntu-latest
    needs: test
    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}
      cancel-in-progress: true
    env:
      VITE_GOOGLE_ANALYTICS_ID: G-4LNTLBZCVM
      VITE_BACKEND_URL: https://api.githubcontrib.samarchyan.me/
      VITE_ADMIN_EMAIL: desecho@gmail.com
    steps:
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3.10.0

      - name: Login to GitHub registry
        uses: docker/login-action@v3.4.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ github.token }}

      - name: Checkout code
        uses: actions/checkout@v4.2.2

      - name: Build and push docker backend image
        uses: docker/build-push-action@v6.15.0
        with:
          push: true
          tags: ghcr.io/${{ github.repository }}-backend:latest
          cache-from: type=gha
          cache-to: type=gha,mode=max
          context: .

      - name: Build and push docker frontend image
        uses: docker/build-push-action@v6.15.0
        with:
          context: ./frontend
          build-args: |
            VITE_GOOGLE_ANALYTICS_ID=${{ env.VITE_GOOGLE_ANALYTICS_ID }}
            VITE_BACKEND_URL=${{ env.VITE_BACKEND_URL }}
            VITE_ADMIN_EMAIL=${{ env.VITE_ADMIN_EMAIL }}
          push: true
          tags: ghcr.io/${{ github.repository }}-frontend:latest
          cache-from: type=gha
          cache-to: type=gha,mode=max
  upload_files:
    name: Upload files
    runs-on: ubuntu-latest
    needs: build
    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}
      cancel-in-progress: true
    env:
      SPACE_NAME: cdn.githubcontrib.samarchyan.me
    steps:
      - name: Checkout code
        uses: actions/checkout@v4.2.2

      - name: Set up Python
        uses: actions/setup-python@v5.5.0
        with:
          python-version: "3.12"

      - name: Use uv cache
        uses: actions/cache@v4.2.3
        with:
          path: ~/.cache/uv
          key: uv

      - name: Use venv cache
        uses: actions/cache@v4.2.3
        with:
          path: .venv
          key: venv-${{ hashFiles('pyproject.toml', 'uv.lock') }}

      - name: Install uv
        run: pip install uv

      # This is needed to avoid errors when running collectstatic command
      - name: Create env files
        run: make create-env-files

      - name: Create venv
        run: make create-venv

      - name: Collect static files
        run: make collectstatic

      - name: Upload static files
        uses: BetaHuhn/do-spaces-action@v2.0.146
        with:
          access_key: ${{ secrets.SPACES_ACCESS_KEY }}
          secret_key: ${{ secrets.SPACES_SECRET_KEY }}
          space_name: ${{ env.SPACE_NAME }}
          space_region: nyc3
          source: static

      - name: Install doctl
        uses: digitalocean/action-doctl@v2.5.1
        with:
          token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}

      - name: Flush CDN cache
        run: make flush-cdn-cache
  restart_app:
    name: Restart app
    uses: ./.github/workflows/reusable_restart_app.yaml
    needs: upload_files
    secrets: inherit
    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}
      cancel-in-progress: true
  migrate_db:
    name: Migrate DB
    runs-on: ubuntu-latest
    needs: restart_app
    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v4.2.2

      - name: Install kubectl
        uses: azure/setup-kubectl@v4.0.0

      - name: Configure kubectl
        run: |
          mkdir ~/.kube
          echo "$KUBECONFIG" > ~/.kube/config
        env:
          KUBECONFIG: ${{ secrets.KUBECONFIG }} # Done as a variable because it doesn't work in place.

      - name: Install doctl
        uses: digitalocean/action-doctl@v2.5.1
        with:
          token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}

      - name: Run db migration
        run: make prod-migrate