gohorsejobs/.forgejo/workflows/deploy.yaml
2026-01-31 15:01:07 -03:00

116 lines
No EOL
4.7 KiB
YAML

name: Deploy Backend and Backoffice Dev
on:
workflow_dispatch:
push:
branches:
- dev
env:
REGISTRY: pipe.gohorsejobs.com
IMAGE_NAMESPACE: bohessefm
DOCKER_MTU: 1200
jobs:
build-and-push:
runs-on:
- self-hosted
- ubuntu-latest
container:
image: docker:24.0.7-dind
options: --privileged
env:
# Forçamos o uso do localhost para evitar erros de DNS/Lookup
DOCKER_HOST: tcp://localhost:2375
DOCKER_TLS_CERTDIR: ""
steps:
- name: Prepare Environment (MTU & Git & Docker Daemon)
run: |
# 1. Ajuste de Rede
ip link set dev eth0 mtu ${{ env.DOCKER_MTU }} || true
apk add --no-cache git
# 2. Inicia o Docker Daemon em background dentro do próprio container
# Isso garante que 'localhost:2375' funcione sem depender de DNS externo
nohup dockerd --host=tcp://localhost:2375 --host=unix:///var/run/docker.sock --mtu=${{ env.DOCKER_MTU }} &
# 3. Espera o Docker subir (retry loop)
timeout 30s sh -c 'until docker info >/dev/null 2>&1; do echo "Aguardando Docker..."; sleep 2; done'
- name: Checkout code
run: |
git config --global core.compression 0
git clone --depth 1 --branch dev https://${{ secrets.FORGEJO_TOKEN }}@pipe.gohorsejobs.com/${{ github.repository }}.git .
- name: Docker Login (Forgejo)
run: |
# Autenticação usando o Token do Forgejo
echo "${{ secrets.FORGEJO_TOKEN }}" | docker login ${{ env.REGISTRY }} \
-u ${{ env.IMAGE_NAMESPACE }} --password-stdin
- name: Build & Push Backend
run: |
docker build --build-arg DOCKER_MTU=${{ env.DOCKER_MTU }} \
-t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }} \
-t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:latest ./backend
docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }}
docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:latest
- name: Build & Push Backoffice
run: |
docker build --build-arg DOCKER_MTU=${{ env.DOCKER_MTU }} \
-t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }} \
-t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:latest ./backoffice
docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }}
docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:latest
deploy-to-k3s:
needs: build-and-push
runs-on:
- self-hosted
- ubuntu-latest
container:
image: alpine/k8s:1.30.0
steps:
- name: Fix Network & Install Git
run: |
ip link set dev eth0 mtu ${{ env.DOCKER_MTU }} || true
apk add --no-cache git
- name: Checkout code
run: |
git clone --depth 1 --branch dev https://${{ secrets.FORGEJO_TOKEN }}@pipe.gohorsejobs.com/${{ github.repository }}.git .
- name: Apply to K3s
run: |
mkdir -p $HOME/.kube
echo "${{ secrets.KUBECONFIG }}" > $HOME/.kube/config
chmod 600 $HOME/.kube/config
export KUBECONFIG=$HOME/.kube/config
kubectl create namespace gohorsejobsdev --dry-run=client -o yaml | kubectl apply -f -
# Garante que o secret de pull de imagem no K3s use o Registry correto
kubectl -n gohorsejobsdev create secret docker-registry forgejo-registry \
--docker-server=${{ env.REGISTRY }} \
--docker-username=${{ env.IMAGE_NAMESPACE }} \
--docker-password="${{ secrets.FORGEJO_TOKEN }}" \
--dry-run=client -o yaml | kubectl apply -f -
kubectl -n gohorsejobsdev create secret generic backend-secrets \
--from-literal=MTU="${{ env.DOCKER_MTU }}" \
--from-literal=JWT_SECRET="${{ vars.JWT_SECRET }}" \
--from-literal=AMQP_URL="${{ vars.AMQP_URL }}" \
--from-literal=DATABASE_URL="${{ vars.DATABASE_URL }}" \
--dry-run=client -o yaml | kubectl apply -f -
kubectl apply -f k8s/dev/ -n gohorsejobsdev
kubectl -n gohorsejobsdev set image deployment/gohorse-backend-dev \
backend=${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }}
kubectl -n gohorsejobsdev set image deployment/gohorse-backoffice-dev \
backoffice=${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }}
kubectl -n gohorsejobsdev rollout status deployment/gohorse-backend-dev --timeout=120s
kubectl -n gohorsejobsdev rollout status deployment/gohorse-backoffice-dev --timeout=120s