From 6c88fde36ab6ab8d2831e8847455c1621574faef Mon Sep 17 00:00:00 2001
From: Marcus <bohessefm@gmail.com>
Date: Sat, 31 Jan 2026 16:18:42 -0300
Subject: [PATCH] ajustes novos

---
 .forgejo/workflows/deploy.yaml | 27 +++++++++++++++++----------
 1 file changed, 17 insertions(+), 10 deletions(-)

diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml
index b70cb38..6add55f 100644
--- a/.forgejo/workflows/deploy.yaml
+++ b/.forgejo/workflows/deploy.yaml
@@ -23,12 +23,17 @@ jobs:
 
       - name: Build & Push Backend
         run: |
-          docker build -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:latest ./backend
+          # Build usando SHA para imutabilidade e latest para conveniência
+          docker build -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }} \
+            -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:latest ./backend
+          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }}
           docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:latest
 
       - name: Build & Push Backoffice
         run: |
-          docker build -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:latest ./backoffice
+          docker build -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }} \
+            -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:latest ./backoffice
+          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }}
           docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:latest
 
   deploy:
@@ -36,7 +41,7 @@ jobs:
     runs-on: [self-hosted, linux-amd64]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4 # ESSENCIAL: Garante que a pasta k8s/dev/ esteja lá
+        uses: actions/checkout@v4
 
       - name: Install kubectl
         run: |
@@ -60,7 +65,7 @@ jobs:
           sed 's/namespace: forgejo/namespace: gohorsejobsdev/' | \
           kubectl apply -f - --force
 
-          # Injeta todas as variáveis do seu print
+          # Injeta variáveis (Lembre-se de mudar DATABASE_URL para sslmode=disable no Forgejo!)
           kubectl delete secret backend-secrets -n gohorsejobsdev --ignore-not-found
           kubectl create secret generic backend-secrets -n gohorsejobsdev \
             --from-literal=MTU="${{ vars.MTU }}" \
@@ -83,13 +88,15 @@ jobs:
 
       - name: Deploy to K3s
         run: |
-          # Verifica se o caminho existe antes de aplicar para evitar erro silencioso
-          ls -R k8s/dev/
-          
           kubectl apply -f k8s/dev/ -n gohorsejobsdev
           
-          kubectl -n gohorsejobsdev set image deployment/gohorse-backend-dev backend=${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:latest
-          kubectl -n gohorsejobsdev set image deployment/gohorse-backoffice-dev backoffice=${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:latest
+          # Vincula o deployment ao SHA específico para garantir que o Pull ocorra corretamente
+          kubectl -n gohorsejobsdev set image deployment/gohorse-backend-dev backend=${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }}
+          kubectl -n gohorsejobsdev set image deployment/gohorse-backoffice-dev backoffice=${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }}
           
+          # Força o restart para carregar os novos valores do secret backend-secrets
           kubectl -n gohorsejobsdev rollout restart deployment/gohorse-backend-dev
-          kubectl -n gohorsejobsdev rollout restart deployment/gohorse-backoffice-dev
\ No newline at end of file
+          kubectl -n gohorsejobsdev rollout restart deployment/gohorse-backoffice-dev
+          
+          # Aguarda estabilização
+          kubectl -n gohorsejobsdev rollout status deployment/gohorse-backend-dev --timeout=120s
\ No newline at end of file