.gitlab-ci.yml

stages:
  - build
  - test
  - prepare
  - deploy
  - rollback

default:
  image: jellybellydev/ci-cd-theory-into-practice:latest


## Template filter
.branch_filter: &branch_filter
  only:
    - branches

.master_filter: &master_filter
  only:
    - master

.tags_filter: &tags_filter
  only:
    - tags


## Stage Build
install-deps:
  stage: build
  <<: *branch_filter
  script:
    - composer install
  artifacts:
    expire_in: 3 hours
    paths:
      - bin/**
      - config/**
      - public/**
      - src/**
      - templates/**
      - tests/**
      - var/**
      - vendor/**
      - .env
      - .env.test
      - .php_cs.dist
      - composer.json
      - composer.lock
      - psalm.xml
      - symfony.lock


## Stage Tests
php-cs-fixer:
  stage: test
  <<: *branch_filter
  dependencies:
    - install-deps
  script:
    - vendor/bin/php-cs-fixer fix --verbose --diff --dry-run

lint-yaml-config:
  stage: test
  <<: *branch_filter
  dependencies:
    - install-deps
  script:
    - bin/console lint:yaml config

phpunit:
  stage: test
  <<: *branch_filter
  dependencies:
    - install-deps
  script:
    - XDEBUG_MODE=coverage bin/phpunit --colors=never --coverage-text

psalm:
  stage: test
  <<: *branch_filter
  dependencies:
    - install-deps
  script:
    - vendor/bin/psalm


## Template to prepare artifact deployable
.prepare_template: &prepare_template
  script:
    - composer install --no-dev --optimize-autoloader
    - composer dump-autoload --no-dev --classmap-authoritative
    - composer dump-env
    - echo "export CI_JOB_ID_ARTIFACTS=\"$(echo "$CI_JOB_ID")\"" > gitlab_variables
  artifacts:
    expire_in: 3 hours
    paths:
      - bin/**
      - config/**
      - public/**
      - src/**
      - vendor/**
      - .env
      - .env.local
      - .env.local.php
      - composer.json
      - gitlab_variables


## Stage Prepare
prepare:staging:
  stage: prepare
  <<: *prepare_template
  <<: *master_filter
  before_script:
    - echo "APP_ENV=staging" >> .env.local

prepare:production:
  stage: prepare
  <<: *prepare_template
  <<: *tags_filter
  before_script:
    - echo "APP_ENV=prod" >> .env.local


## Template to deploy artifact
.deploy_template: &deploy_template
  image: spy86/ansible:latest
  before_script:
    ## Create the SSH directory and give it the right permissions
    - mkdir -p ~/.ssh
    - chmod 700 ~/.ssh
    ## Install ssh-agent if not already installed, it is required by Docker.
    - 'command -v ssh-agent >/dev/null || ( apt-get update -y && apt-get install openssh-client -y )'
    ## Run ssh-agent (inside the build environment)
    - eval $(ssh-agent -s)
    ## Add the SSH key stored in DEPLOY_PRIVATE_KEY variable to the agent store
    - echo "$DEPLOY_PRIVATE_KEY" | tr -d '\r' | ssh-add -
    ## Verifying the SSH host keys
    - ssh-keyscan -H $HOST_FOR_SSH_KEYSCAN >> ~/.ssh/known_hosts
    - if [[ -f gitlab_variables ]]; then source gitlab_variables; fi
    - cd ansible-deploy
    - 'echo "gitlab_access_token: \"${GITLAB_ACCESS_TOKEN_API}\"" >> user-vars.yml'
    - 'echo "telegram_token: \"${TELEGRAM_TOKEN}\"" >> user-vars.yml'
    - 'echo "telegram_chat_id: \"${TELEGRAM_CHAT_ID}\"" >> user-vars.yml'


## Deploy on staging
deploy:staging:
  stage: deploy
  variables:
    HOST_FOR_SSH_KEYSCAN: "161.97.172.133"
    DEPLOY_PRIVATE_KEY: $MY_DEPLOY_PRIVATE_KEY
  dependencies:
    - prepare:staging
  <<: *deploy_template
  <<: *master_filter
  script:
    - echo "Deploy of $CI_COMMIT_REF_NAME on staging server"
    - ansible-playbook deploy.yml -i inventories/staging -e "app_version=$CI_COMMIT_REF_NAME ci_job_id=$CI_JOB_ID_ARTIFACTS"

rollback:staging:
  stage: rollback
  variables:
    HOST_FOR_SSH_KEYSCAN: "161.97.172.133"
    DEPLOY_PRIVATE_KEY: $MY_DEPLOY_PRIVATE_KEY
  when: manual
  dependencies: []
  <<: *deploy_template
  <<: *master_filter
  script:
    - echo "Rollback of $CI_COMMIT_REF_NAME on staging server"
    - ansible-playbook rollback.yml -i inventories/staging


## Deploy on production
deploy:production:
  stage: deploy
  variables:
    HOST_FOR_SSH_KEYSCAN: "161.97.172.133"
    DEPLOY_PRIVATE_KEY: $MY_DEPLOY_PRIVATE_KEY
  when: manual
  dependencies:
    - prepare:production
  <<: *deploy_template
  <<: *tags_filter
  script:
    - echo "Deploy of $CI_COMMIT_REF_NAME on production server"
    - ansible-playbook deploy.yml -i inventories/production -e "app_version=$CI_COMMIT_TAG ci_job_id=$CI_JOB_ID_ARTIFACTS"

rollback:production:
  stage: rollback
  variables:
    HOST_FOR_SSH_KEYSCAN: "161.97.172.133"
    DEPLOY_PRIVATE_KEY: $MY_DEPLOY_PRIVATE_KEY
  when: manual
  dependencies: []
  <<: *deploy_template
  <<: *tags_filter
  script:
    - echo "Rollback of $CI_COMMIT_TAG on production server"
    - ansible-playbook rollback.yml -i inventories/production