CI/CD
This commit is contained in:
+12
-58
@@ -1,65 +1,19 @@
|
|||||||
# Dependencies
|
|
||||||
node_modules
|
node_modules
|
||||||
.pnp
|
|
||||||
.pnp.*
|
|
||||||
.yarn/*
|
|
||||||
!.yarn/patches
|
|
||||||
!.yarn/plugins
|
|
||||||
!.yarn/releases
|
|
||||||
!.yarn/versions
|
|
||||||
|
|
||||||
# Testing
|
|
||||||
coverage
|
|
||||||
|
|
||||||
# Next.js
|
|
||||||
.next
|
.next
|
||||||
out
|
.git
|
||||||
build
|
.github
|
||||||
|
.env
|
||||||
# Production
|
.env.local
|
||||||
dist
|
.env.*.local
|
||||||
|
|
||||||
# Misc
|
|
||||||
.DS_Store
|
|
||||||
*.pem
|
|
||||||
|
|
||||||
# Debug
|
|
||||||
npm-debug.log*
|
npm-debug.log*
|
||||||
yarn-debug.log*
|
yarn-debug.log*
|
||||||
yarn-error.log*
|
yarn-error.log*
|
||||||
.pnpm-debug.log*
|
.DS_Store
|
||||||
|
*.pem
|
||||||
# Local env files
|
coverage
|
||||||
.env
|
out
|
||||||
.env*.local
|
build
|
||||||
|
|
||||||
# Vercel
|
|
||||||
.vercel
|
|
||||||
|
|
||||||
# TypeScript
|
|
||||||
*.tsbuildinfo
|
|
||||||
next-env.d.ts
|
|
||||||
|
|
||||||
# IDE
|
|
||||||
.vscode
|
|
||||||
.idea
|
|
||||||
*.swp
|
|
||||||
*.swo
|
|
||||||
*~
|
|
||||||
|
|
||||||
# Git
|
|
||||||
.git
|
|
||||||
.gitignore
|
|
||||||
|
|
||||||
# Docker
|
|
||||||
Dockerfile
|
Dockerfile
|
||||||
.dockerignore
|
|
||||||
docker-compose*.yml
|
docker-compose*.yml
|
||||||
|
.dockerignore
|
||||||
|
README.md
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
@@ -86,6 +86,19 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
npm run build --if-present
|
npm run build --if-present
|
||||||
|
|
||||||
- name: Run Lint
|
|
||||||
|
- name: Setup SSH key
|
||||||
run: |
|
run: |
|
||||||
npm run lint --if-present
|
mkdir -p ~/.ssh
|
||||||
|
echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
|
||||||
|
chmod 600 ~/.ssh/id_ed25519
|
||||||
|
ssh-keyscan -p ${{ secrets.SERVER_SSH_PORT }} -H ${{ secrets.SERVER_HOST }} >> ~/.ssh/known_hosts
|
||||||
|
|
||||||
|
- name: Deploy
|
||||||
|
run: |
|
||||||
|
ssh ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }} -p ${{ secrets.SERVER_SSH_PORT }} << 'EOF'
|
||||||
|
cd application/Frontend
|
||||||
|
git pull origin production
|
||||||
|
docker compose -f docker-compose-prod.yml down
|
||||||
|
docker compose -f docker-compose-prod.yml up -d --build
|
||||||
|
EOF
|
||||||
|
|||||||
@@ -1,72 +1,62 @@
|
|||||||
name: Frontend CI/CD
|
name: Frontend CI/CD
|
||||||
|
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
branches: [main]
|
branches: [main]
|
||||||
paths:
|
pull_request:
|
||||||
- 'frontend/**'
|
branches: [main]
|
||||||
- 'frontend/.github/workflows/frontend.yml'
|
|
||||||
pull_request:
|
|
||||||
branches: [main]
|
|
||||||
paths:
|
|
||||||
- 'frontend/**'
|
|
||||||
- 'frontend/.github/workflows/frontend.yml'
|
|
||||||
|
|
||||||
defaults:
|
jobs:
|
||||||
run:
|
build:
|
||||||
working-directory: frontend
|
name: Build & Lint
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- name: Checkout repository
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
jobs:
|
- name: Set up Node.js
|
||||||
build:
|
uses: actions/setup-node@v4
|
||||||
name: Build, Lint & Test
|
with:
|
||||||
runs-on: ubuntu-latest
|
node-version: '20'
|
||||||
strategy:
|
|
||||||
fail-fast: true
|
|
||||||
matrix:
|
|
||||||
node-version: ['20']
|
|
||||||
steps:
|
|
||||||
- name: Checkout repository
|
|
||||||
uses: actions/checkout@v4
|
|
||||||
|
|
||||||
- name: Set up Node.js ${{ matrix.node-version }}
|
- name: Cache npm dependencies
|
||||||
uses: actions/setup-node@v4
|
uses: actions/cache@v4
|
||||||
with:
|
with:
|
||||||
node-version: ${{ matrix.node-version }}
|
path: ~/.npm
|
||||||
|
key: ${{ runner.os }}-npm-${{ hashFiles('package-lock.json') }}
|
||||||
|
restore-keys: |
|
||||||
|
${{ runner.os }}-npm-
|
||||||
|
|
||||||
- name: Cache npm dependencies
|
- name: Install dependencies
|
||||||
uses: actions/cache@v4
|
run: npm ci
|
||||||
with:
|
|
||||||
path: ~/.npm
|
|
||||||
key: ${{ runner.os }}-npm-frontend-${{ hashFiles('frontend/package-lock.json') }}
|
|
||||||
restore-keys: |
|
|
||||||
${{ runner.os }}-npm-frontend-
|
|
||||||
|
|
||||||
- name: Install dependencies
|
- name: Lint
|
||||||
run: npm ci
|
run: npm run lint --if-present
|
||||||
|
|
||||||
- name: Build
|
- name: Build
|
||||||
run: npm run build
|
run: npm run build
|
||||||
|
|
||||||
- name: Lint
|
deploy:
|
||||||
run: npm run lint --if-present
|
name: Deploy Frontend
|
||||||
|
needs: build
|
||||||
|
if: github.event_name == 'push' && github.ref == 'refs/heads/main'
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- name: Checkout repository
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
- name: Test
|
- name: Setup SSH key
|
||||||
run: npm test --if-present
|
run: |
|
||||||
|
mkdir -p ~/.ssh
|
||||||
|
echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
|
||||||
|
chmod 600 ~/.ssh/id_ed25519
|
||||||
|
ssh-keyscan -p ${{ secrets.SERVER_SSH_PORT }} -H ${{ secrets.SERVER_HOST }} >> ~/.ssh/known_hosts
|
||||||
|
|
||||||
deploy:
|
- name: Deploy
|
||||||
name: Deploy Frontend
|
run: |
|
||||||
needs: build
|
ssh ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }} -p ${{ secrets.SERVER_SSH_PORT }} << 'EOF'
|
||||||
if: github.event_name == 'push' && github.ref == 'refs/heads/main'
|
cd ${{ secrets.PROJECT_PATH }}/frontend
|
||||||
runs-on: ubuntu-latest
|
git pull origin main
|
||||||
steps:
|
docker compose -f docker-compose-prod.yml down
|
||||||
- name: Deploy via SSH
|
docker compose -f docker-compose-prod.yml up -d --build
|
||||||
uses: appleboy/ssh-action@v1
|
EOF
|
||||||
with:
|
|
||||||
host: ${{ secrets.SSH_HOST }}
|
|
||||||
username: ${{ secrets.SSH_USER }}
|
|
||||||
port: ${{ secrets.SSH_PORT }}
|
|
||||||
key: ${{ secrets.SSH_PRIVATE_KEY }}
|
|
||||||
script: |
|
|
||||||
cd /opt/myproject/frontend
|
|
||||||
git pull origin main
|
|
||||||
sudo systemctl restart frontend
|
|
||||||
|
|||||||
+43
-56
@@ -1,80 +1,67 @@
|
|||||||
# Stage 1: Dependencies
|
FROM docker.iranserver.com/node:20-bookworm-slim AS base
|
||||||
FROM node:20-alpine AS deps
|
|
||||||
RUN npm config set registry https://package-mirror.liara.ir/repository/npm/
|
ENV NEXT_TELEMETRY_DISABLED=1
|
||||||
# Install OpenSSL for Prisma
|
|
||||||
RUN apk add --no-cache openssl libc6-compat
|
# Debian mirrors (Iranian)
|
||||||
|
RUN rm -f /etc/apt/sources.list /etc/apt/sources.list.d/* && \
|
||||||
|
printf '%s\n' \
|
||||||
|
'deb https://mirror-linux.runflare.com/debian/ bookworm main contrib non-free non-free-firmware' \
|
||||||
|
'deb https://mirror-linux.runflare.com/debian/ bookworm-updates main contrib non-free non-free-firmware' \
|
||||||
|
'deb https://mirror-linux.runflare.com/debian-security/ bookworm-security main contrib non-free non-free-firmware' \
|
||||||
|
'' \
|
||||||
|
'deb [trusted=yes] https://mirror2.chabokan.net/debian bookworm main contrib non-free non-free-firmware' \
|
||||||
|
'deb [trusted=yes] https://mirror2.chabokan.net/debian-security bookworm-security main contrib non-free non-free-firmware' \
|
||||||
|
'' \
|
||||||
|
'deb http://mirror.iranserver.com/debian/ bookworm main contrib non-free non-free-firmware' \
|
||||||
|
'deb-src http://mirror.iranserver.com/debian/ bookworm main contrib non-free non-free-firmware' \
|
||||||
|
> /etc/apt/sources.list
|
||||||
|
|
||||||
|
# npm mirrors (Iranian)
|
||||||
|
RUN npm config set registry https://package-mirror.liara.ir/repository/npm/ && \
|
||||||
|
npm config set @runflare:registry https://mirror-npm.runflare.com/ && \
|
||||||
|
npm config set @chabokan:registry https://mirror2.chabokan.net/npm/ && \
|
||||||
|
npm config set strict-ssl false && \
|
||||||
|
npm config set fetch-retries 5 && \
|
||||||
|
npm config set fetch-retry-mintimeout 20000
|
||||||
|
|
||||||
|
# ---- deps stage ----
|
||||||
|
FROM base AS deps
|
||||||
|
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
|
||||||
# Copy package files
|
COPY package.json package-lock.json ./
|
||||||
COPY package.json ./
|
RUN npm ci
|
||||||
|
|
||||||
# Install dependencies (skip scripts to avoid postinstall which needs source code)
|
# ---- build stage ----
|
||||||
RUN npm install --ignore-scripts
|
FROM base AS builder
|
||||||
|
|
||||||
# Stage 2: Builder
|
|
||||||
FROM node:20-alpine AS builder
|
|
||||||
RUN npm config set registry https://package-mirror.liara.ir/repository/npm/
|
|
||||||
# Install OpenSSL for Prisma
|
|
||||||
RUN apk add --no-cache openssl libc6-compat
|
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
|
||||||
# Copy dependencies from deps stage
|
|
||||||
COPY --from=deps /app/node_modules ./node_modules
|
COPY --from=deps /app/node_modules ./node_modules
|
||||||
COPY --from=deps /app/package.json ./package.json
|
|
||||||
|
|
||||||
# Copy source code
|
|
||||||
COPY . .
|
COPY . .
|
||||||
|
|
||||||
# Set environment variables for build
|
ENV NODE_ENV=production
|
||||||
ARG NODE_ENV=production
|
|
||||||
ARG NEXT_PUBLIC_APP_URL
|
|
||||||
ARG NEXT_PUBLIC_DOCS_URL
|
|
||||||
ARG API_URL
|
|
||||||
ARG BASEPATH
|
|
||||||
ARG MAPBOX_ACCESS_TOKEN
|
|
||||||
ARG DATABASE_URL
|
|
||||||
|
|
||||||
ENV NODE_ENV=$NODE_ENV
|
|
||||||
ENV NEXT_PUBLIC_APP_URL=$NEXT_PUBLIC_APP_URL
|
|
||||||
ENV NEXT_PUBLIC_DOCS_URL=$NEXT_PUBLIC_DOCS_URL
|
|
||||||
ENV API_URL=$API_URL
|
|
||||||
ENV BASEPATH=$BASEPATH
|
|
||||||
ENV MAPBOX_ACCESS_TOKEN=$MAPBOX_ACCESS_TOKEN
|
|
||||||
ENV DATABASE_URL=$DATABASE_URL
|
|
||||||
|
|
||||||
# Generate Prisma Client and build icons (postinstall script)
|
|
||||||
# These commands need the source code to be present
|
|
||||||
RUN npm run build:icons
|
|
||||||
|
|
||||||
# Build the application
|
|
||||||
RUN npm run build
|
RUN npm run build
|
||||||
|
|
||||||
# Stage 3: Runner
|
# ---- production stage ----
|
||||||
FROM node:20-alpine AS runner
|
FROM base AS runner
|
||||||
RUN npm config set registry https://package-mirror.liara.ir/repository/npm/
|
|
||||||
WORKDIR /app
|
WORKDIR /app
|
||||||
|
|
||||||
ENV NODE_ENV=production
|
ENV NODE_ENV=production
|
||||||
ENV PORT=9031
|
ENV PORT=3000
|
||||||
ENV NEXT_TELEMETRY_DISABLED=1
|
ENV HOSTNAME=0.0.0.0
|
||||||
|
|
||||||
# Install OpenSSL for Prisma runtime
|
RUN addgroup --system --gid 1001 nodejs && \
|
||||||
RUN apk add --no-cache openssl libc6-compat
|
adduser --system --uid 1001 nextjs
|
||||||
|
|
||||||
# Create a non-root user
|
COPY --from=builder /app/public ./public
|
||||||
RUN addgroup --system --gid 1001 nodejs
|
|
||||||
RUN adduser --system --uid 1001 nextjs
|
|
||||||
|
|
||||||
# Copy necessary files from standalone build
|
|
||||||
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
|
||||||
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
|
||||||
COPY --from=builder --chown=nextjs:nodejs /app/public ./public
|
|
||||||
|
|
||||||
USER nextjs
|
USER nextjs
|
||||||
|
|
||||||
EXPOSE 9031
|
EXPOSE 3000
|
||||||
|
|
||||||
ENV PORT=9031
|
|
||||||
ENV HOSTNAME="0.0.0.0"
|
|
||||||
|
|
||||||
CMD ["node", "server.js"]
|
CMD ["node", "server.js"]
|
||||||
|
|||||||
@@ -0,0 +1,13 @@
|
|||||||
|
services:
|
||||||
|
frontend:
|
||||||
|
build:
|
||||||
|
context: .
|
||||||
|
dockerfile: Dockerfile
|
||||||
|
container_name: croplogic-frontend
|
||||||
|
restart: unless-stopped
|
||||||
|
ports:
|
||||||
|
- "${PORT:-9031}:3000"
|
||||||
|
env_file:
|
||||||
|
- .env
|
||||||
|
environment:
|
||||||
|
- NODE_ENV=production
|
||||||
Reference in New Issue
Block a user