backend-python/.github/workflows/deploy.yml at main · brilliance-admin/backend-python · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
name: CI-CD Pipeline

on:
  push:
    branches: [ main ]
  workflow_dispatch:

jobs:
  build-test:
    # runs-on: self-hosted
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v5

      - name: Build containers
        run: docker build -t brilliance-backend -f .configs/docker/Dockerfile .

      - name: Run tests
        run: docker compose -f .configs/docker/docker-compose.yml run --rm backend sh -c 'git config --global --add safe.directory /app && uv sync --all-groups --all-extras && uv run pytest -vvv'

      - name: Cleanup
        if: always()
        run: sudo chown -R deploy:deploy $GITHUB_WORKSPACE || true

  deploy:
    needs: build-test
    # runs-on: self-hosted
    runs-on: ubuntu-latest
    if: ${{ success() }}
    steps:
      - name: Checkout code
        uses: actions/checkout@v5

      - name: Prepare server
        uses: appleboy/ssh-action@master
        with:
          host: ${{ vars.SERVER_HOST }}
          username: deploy
          key: ${{ secrets.SERVER_SSH_KEY }}
          timeout: 120s
          command_timeout: 10m
          script: |
            set -e
            sudo apt update
            sudo apt install -y rsync
            mkdir -p /home/deploy/apps/backend-python

      - name: Copy files to server
        uses: burnett01/rsync-deployments@v8
        with:
          switches: -rltvz --delete --exclude-from='.rsyncignore'
          path: .
          remote_path: /home/deploy/apps/backend-python
          remote_host: ${{ vars.SERVER_HOST }}
          remote_user: deploy
          remote_key: ${{ secrets.SERVER_SSH_KEY }}

      - name: Deploy containers
        uses: appleboy/ssh-action@master
        env:
          POSTGRES_DB: ${{ secrets.POSTGRES_DB }}
          POSTGRES_USER: ${{ secrets.POSTGRES_USER }}
          POSTGRES_PASSWORD: ${{ secrets.POSTGRES_PASSWORD }}
        with:
          host: ${{ vars.SERVER_HOST }}
          username: deploy
          key: ${{ secrets.SERVER_SSH_KEY }}
          timeout: 120s
          command_timeout: 10m
          envs: POSTGRES_DB,POSTGRES_USER,POSTGRES_PASSWORD
          script: |
            set -e
            sudo chown -R deploy:deploy /home/deploy/apps/backend-python
            cd /home/deploy/apps/backend-python
            docker compose -f .configs/docker/docker-compose.prod.yml up -d --build
            sudo ln -sf /home/deploy/apps/backend-python/.configs/nginx/example.conf /etc/nginx/sites-enabled/example
            sudo rm -f /etc/nginx/sites-enabled/default
            sudo nginx -t
            sudo systemctl reload nginx

      - name: Wait backend healthy
        uses: appleboy/ssh-action@master
        env:
          POSTGRES_DB: ${{ secrets.POSTGRES_DB }}
          POSTGRES_USER: ${{ secrets.POSTGRES_USER }}
          POSTGRES_PASSWORD: ${{ secrets.POSTGRES_PASSWORD }}
        with:
          host: ${{ vars.SERVER_HOST }}
          username: deploy
          key: ${{ secrets.SERVER_SSH_KEY }}
          timeout: 120s
          command_timeout: 10m
          envs: POSTGRES_DB,POSTGRES_USER,POSTGRES_PASSWORD
          script: |
            set -e
            cd /home/deploy/apps/backend-python

            CONTAINER="$(docker compose -f .configs/docker/docker-compose.prod.yml ps -q backend)"

            if [ -z "$CONTAINER" ]; then
              echo "Backend container not found"
              docker compose -f .configs/docker/docker-compose.prod.yml ps
              exit 1
            fi

            for i in $(seq 1 30); do
              STATUS="$(docker inspect --format='{{if .State.Health}}{{.State.Health.Status}}{{else}}no healthcheck{{end}}' "$CONTAINER" 2>/dev/null || echo 'not found')"
              echo "Attempt $i: status=$STATUS"

              if [ "$STATUS" = "healthy" ] || [ "$STATUS" = "no healthcheck" ]; then
                exit 0
              fi

              if [ "$i" = "30" ]; then
                echo "Container logs:"
                docker logs "$CONTAINER" --tail 100
                exit 1
              fi

              sleep 2
            done