build_and_deploy.yml

name: Build and Deploy

on:
  # Push includes PR merge
  push:
    branches:
      - main
      - staging
      - development
    paths:
      # Workflow is triggered only if src changes
      - src/**
  # Allow manual trigger
  workflow_dispatch:

jobs:
  pytest:
    uses: ./.github/workflows/r-pytest.yml
    with:
      image_tag: ci-${{ github.ref_name }}

  frontend-tests:
    uses: ./.github/workflows/r-frontend_tests.yml

  extract-versions:
    needs:
      - pytest
      - frontend-tests
    uses: ./.github/workflows/r-extract_versions.yml

  backend-build:
    uses: ./.github/workflows/r-build_backend.yml
    needs: extract-versions
    with:
      api_version: ${{ needs.extract-versions.outputs.api_version }}
      build_target: prod
      image_tags: |
        "ghcr.io/hotosm/fmtm/backend:${{ needs.extract-versions.outputs.api_version }}-${{ github.ref_name }}"
        "ghcr.io/hotosm/fmtm/backend:latest"

  frontend-main-build:
    uses: ./.github/workflows/r-build_frontend.yml
    needs: extract-versions
    with:
      environment: ${{ github.ref_name }}
      name: main
      app_version: ${{ needs.extract-versions.outputs.frontend_main_version }}
      build_target: prod
      image_tags: |
        "ghcr.io/hotosm/fmtm/frontend:${{ needs.extract-versions.outputs.frontend_main_version }}-${{ github.ref_name }}"
        "ghcr.io/hotosm/fmtm/frontend:latest"

  smoke-test-backend:
    runs-on: ubuntu-latest
    needs:
      - extract-versions
      - backend-build
    environment:
      name: ${{ github.ref_name }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3

      - name: Environment to .env
        env:
          GIT_BRANCH: ${{ github.ref_name }}
          API_VERSION: ${{ needs.extract-versions.outputs.api_version }}
          FRONTEND_MAIN_VERSION: ${{ needs.extract-versions.outputs.frontend_main_version }}
        run: |
          echo "${{ secrets.DOTENV }}" > .env
          echo "GIT_BRANCH=${GIT_BRANCH}" >> .env
          echo "API_VERSION=${API_VERSION}" >> .env
          echo "FRONTEND_MAIN_VERSION=${FRONTEND_MAIN_VERSION}" >> .env

      - name: Backend smoke test
        run: |
          echo "Not implemented" 
          # source .env
          # docker network create fmtm

          # docker pull "postgis/postgis:14-3.3-alpine"
          # docker run --rm -d \
          #   --name=fmtm-db \
          #   --network=fmtm \
          #   -e POSTGRES_USER=fmtm \
          #   -e POSTGRES_PASSWORD=fmtm \
          #   -e POSTGRES_DB=fmtm \
          #   "postgis/postgis:14-3.3-alpine"

          # docker pull "ghcr.io/hotosm/fmtm/backend:${API_VERSION}-${GIT_BRANCH}"
          # docker run --rm -d \
          #   --network=fmtm \
          #   -p 8080:8080 \
          #   -e FRONTEND_MAIN_URL="http://test.com" \
          #   -e OSM_CLIENT_ID="test" \
          #   -e OSM_CLIENT_SECRET="test" \
          #   -e OSM_SECRET_KEY="test" \
          #   "ghcr.io/hotosm/fmtm/backend:${API_VERSION}-${GIT_BRANCH}"

          # # First wait 10 seconds for API
          # sleep 10
          # # Check the exit status of curl and exit the job if it fails
          # if ! curl -f http://localhost:8080/docs; then
          #   echo "curl failed to access http://localhost:8080/docs"
          #   exit 1
          # fi

  smoke-test-frontend:
    runs-on: ubuntu-latest
    needs:
      - extract-versions
      - frontend-main-build
    environment:
      name: ${{ github.ref_name }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3

      - name: Frontend smoke test
        run: echo "Not implemented"

  deploy-containers:
    runs-on: ubuntu-latest
    needs:
      - extract-versions
      - smoke-test-backend
      - smoke-test-frontend
    environment:
      name: ${{ github.ref_name }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3

      - name: Environment to .env
        env:
          GIT_BRANCH: ${{ github.ref_name }}
          API_VERSION: ${{ needs.extract-versions.outputs.api_version }}
          FRONTEND_MAIN_VERSION: ${{ needs.extract-versions.outputs.frontend_main_version }}
        run: |
          echo "${{ secrets.DOTENV }}" > .env
          echo "GIT_BRANCH=${GIT_BRANCH}" >> .env
          echo "API_VERSION=${API_VERSION}" >> .env
          echo "FRONTEND_MAIN_VERSION=${FRONTEND_MAIN_VERSION}" >> .env

      - uses: webfactory/ssh-agent@v0.7.0
        with:
          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}

      - name: Disable Host key verification
        # Hack to prevent "Host key verification failed". Should be replaced with a ssh-keyscan based solution
        run: echo "StrictHostKeyChecking no" >> ~/.ssh/config

      - name: Deploy
        run: |
          docker compose --file docker-compose.deploy.yml pull
          docker compose --file docker-compose.deploy.yml up --detach
        env:
          DOCKER_HOST: ${{ vars.DOCKER_HOST }}