-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge branch 'main' into feat/88/http-only-cookies-for-refresh-token
- Loading branch information
Showing
16 changed files
with
801 additions
and
240 deletions.
There are no files selected for viewing
This file was deleted.
Oops, something went wrong.
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,183 @@ | ||
| name: Deploy Staging | ||
| on: | ||
| workflow_dispatch: | ||
| push: | ||
| branches: ['main'] | ||
| paths: | ||
| - 'backend/**' | ||
| jobs: | ||
| deploy: | ||
| runs-on: ubuntu-latest | ||
| environment: Staging | ||
| defaults: | ||
| run: | ||
| shell: bash | ||
| working-directory: backend | ||
| steps: | ||
| - name: Checkout code | ||
| uses: actions/checkout@v4 | ||
|
|
||
| - name: Create env file | ||
| run: | | ||
| cat << EOF > .env | ||
| APP_ENV=${{ secrets.APP_ENV }} | ||
| APP_NAME=${{ secrets.APP_NAME }} | ||
| AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }} | ||
| AWS_REGION=${{ secrets.AWS_REGION }} | ||
| AWS_S3_BUCKET=${{ secrets.AWS_S3_BUCKET }} | ||
| AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY }} | ||
| BACKEND_URL=${{ secrets.BACKEND_URL }} | ||
| DB_HOST=${{ secrets.DB_HOST }} | ||
| DB_NAME=${{ secrets.DB_NAME }} | ||
| DB_PASSWORD=${{ secrets.DB_PASSWORD }} | ||
| DB_PORT=${{ secrets.DB_PORT }} | ||
| DB_SSLMODE=${{ secrets.DB_SSLMODE }} | ||
| DB_USER=${{ secrets.DB_USER }} | ||
| JWT_SECRET=${{ secrets.JWT_SECRET }} | ||
| JWT_SECRET_VERIFY_EMAIL=${{ secrets.JWT_SECRET_VERIFY_EMAIL }} | ||
| NOREPLY_EMAIL=${{ secrets.NOREPLY_EMAIL }} | ||
| PORT=${{ secrets.PORT }} | ||
| POSTGRES_USER=${{ secrets.DB_USER }} | ||
| POSTGRES_DB=${{ secrets.DB_NAME }} | ||
| POSTGRES_PASSWORD=${{ secrets.DB_PASSWORD }} | ||
| RESEND_API_KEY=${{ secrets.RESEND_API_KEY }} | ||
| EOF | ||
| - name: Setup VPS fingerprint | ||
| run: | | ||
| mkdir -p ~/.ssh | ||
| echo "${{ secrets.VPS_KEY }}" > ~/.ssh/id_rsa | ||
| chmod 600 ~/.ssh/id_rsa | ||
| echo "${{ secrets.VPS_IP }} ${{ secrets.VPS_FINGERPRINT }}" >> ~/.ssh/known_hosts | ||
| - name: Setup Rsync | ||
| uses: GuillaumeFalourd/[email protected] | ||
|
|
||
| - name: Setup VPS File System Tree | ||
| uses: appleboy/[email protected] | ||
| with: | ||
| host: ${{ secrets.VPS_IP }} | ||
| username: ${{ secrets.VPS_USER }} | ||
| key: ${{ secrets.VPS_KEY }} | ||
| script: | | ||
| mkdir -p $HOME/staging/migrations | ||
| - name: Upload .env | ||
| run: | | ||
| rsync -avz --progress .env ${{ secrets.VPS_USER }}@${{ secrets.VPS_IP }}:~/staging/ | ||
| - name: Upload Migrations | ||
| run: | | ||
| rsync -avz --delete --progress .sqlc/migrations/ ${{ secrets.VPS_USER }}@${{ secrets.VPS_IP }}:~/staging/migrations/ | ||
| - name: Boot Postgres and Run Migrations | ||
| uses: appleboy/[email protected] | ||
| env: | ||
| DB_NAME: ${{ secrets.DB_NAME }} | ||
| DB_PASSWORD: ${{ secrets.DB_PASSWORD }} | ||
| DB_PORT: ${{ secrets.DB_PORT }} | ||
| DB_SSLMODE: ${{ secrets.DB_SSLMODE }} | ||
| DB_USER: ${{ secrets.DB_USER }} | ||
| APP_NAME: ${{ secrets.APP_NAME }} | ||
| APP_ENV: ${{ secrets.APP_ENV }} | ||
| with: | ||
| host: ${{ secrets.VPS_IP }} | ||
| username: ${{ secrets.VPS_USER }} | ||
| key: ${{ secrets.VPS_KEY }} | ||
| envs: DB_NAME,DB_PASSWORD,DB_PORT,DB_SSLMODE,DB_USER,APP_NAME,APP_ENV | ||
| script: | | ||
| cd $HOME/staging | ||
| POSTGRES_DATA_DIR="$HOME/staging/postgres" | ||
| mkdir -p $POSTGRES_DATA_DIR | ||
| POSTGRES_CONTAINER="$APP_NAME-$APP_ENV-postgres" | ||
| if ! docker ps --filter "name=$POSTGRES_CONTAINER" --format '{{.Names}}' | grep -q "^$POSTGRES_CONTAINER"; then | ||
| echo "PostgreSQL container not found. Starting new container..." | ||
| docker stop $POSTGRES_CONTAINER || true | ||
| docker rm $POSTGRES_CONTAINER || true | ||
| docker run -d \ | ||
| --name "$POSTGRES_CONTAINER" \ | ||
| -p "$DB_PORT:5432" \ | ||
| -v "$POSTGRES_DATA_DIR:/var/lib/postgresql/data" \ | ||
| --env POSTGRES_USER="${{ secrets.DB_USER }}" \ | ||
| --env POSTGRES_PASSWORD="${{ secrets.DB_PASSWORD }}" \ | ||
| --env POSTGRES_DB="${{ secrets.DB_NAME }}" \ | ||
| postgres:16 | ||
| # Wait for PostgreSQL to be ready | ||
| echo "Waiting for PostgreSQL to be ready..." | ||
| RETRY_COUNT=0 | ||
| MAX_RETRIES=10 | ||
| while ! docker exec "$POSTGRES_CONTAINER" pg_isready -q; do | ||
| RETRY_COUNT=$((RETRY_COUNT + 1)) | ||
| if [ $RETRY_COUNT -eq $MAX_RETRIES ]; then | ||
| echo "Error: PostgreSQL failed to start after $MAX_RETRIES attempts" | ||
| exit 1 | ||
| fi | ||
| echo "Waiting for PostgreSQL to be ready..." | ||
| sleep 1 | ||
| done | ||
| echo "Postgres is ready!" | ||
| else | ||
| echo "PostgreSQL container is already running" | ||
| fi | ||
| goose fix -dir $HOME/staging/migrations | ||
| goose -dir $HOME/staging/migrations postgres \ | ||
| "postgres://$DB_USER:$DB_PASSWORD@localhost:$DB_PORT/$DB_NAME?sslmode=$DB_SSLMODE" up | ||
| - name: Build Docker Image | ||
| run: | | ||
| docker build -t ${{ secrets.APP_NAME }}-${{ secrets.APP_ENV }}:latest . | ||
| docker save -o image.tar ${{ secrets.APP_NAME }}-${{ secrets.APP_ENV }}:latest | ||
| - name: Upload Docker Image | ||
| run: | | ||
| rsync -avz image.tar ${{ secrets.VPS_USER }}@${{ secrets.VPS_IP }}:~/staging/ | ||
| - name: Deploy Go App on VPS | ||
| uses: appleboy/[email protected] | ||
| env: | ||
| DB_NAME: ${{ secrets.DB_NAME }} | ||
| DB_PASSWORD: ${{ secrets.DB_PASSWORD }} | ||
| DB_PORT: ${{ secrets.DB_PORT }} | ||
| DB_SSLMODE: ${{ secrets.DB_SSLMODE }} | ||
| DB_USER: ${{ secrets.DB_USER }} | ||
| APP_NAME: ${{ secrets.APP_NAME }} | ||
| APP_ENV: ${{ secrets.APP_ENV }} | ||
| with: | ||
| host: ${{ secrets.VPS_IP }} | ||
| username: ${{ secrets.VPS_USER }} | ||
| key: ${{ secrets.VPS_KEY }} | ||
| envs: DB_NAME,DB_PASSWORD,DB_PORT,DB_SSLMODE,DB_USER,APP_NAME,APP_ENV | ||
| script: | | ||
| cd $HOME/staging | ||
| echo "Stopping and removing existing container if present..." | ||
| CONTAINER="$APP_NAME-$APP_ENV" | ||
| docker stop $CONTAINER || true | ||
| docker rm $CONTAINER || true | ||
| echo "Loading pre-built docker image..." | ||
| docker load -i image.tar | ||
| echo "Starting new application container..." | ||
| docker run -d \ | ||
| --name $CONTAINER \ | ||
| --env-file .env \ | ||
| --network=host --add-host=host.docker.internal:host-gateway \ | ||
| "$APP_NAME-$APP_ENV:latest" | ||
| echo "Done: Staging Deployment" | ||
| - name: Post Deployment Clean Up on VPS | ||
| uses: appleboy/[email protected] | ||
| with: | ||
| host: ${{ secrets.VPS_IP }} | ||
| username: ${{ secrets.VPS_USER }} | ||
| key: ${{ secrets.VPS_KEY }} | ||
| script: | | ||
| rm -rf $HOME/staging/migrations | ||
| rm -f $HOME/staging/image.tar | ||
| rm -f $HOME/staging/.env |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.