tercul-frontend/.github/workflows/deploy.yml
Damir Mukimov c940582efe
feat: Add GitHub Actions workflows for frontend CI/CD (#5)
* feat: Add GitHub Actions workflows for frontend CI/CD

- Add lint.yml: TypeScript and ESLint checks
- Add build.yml: Vite application build pipeline
- Add docker-build.yml: Multi-arch container image builds
- Add deploy.yml: Production deployment to Docker Swarm
- Add dependabot.yml: Automated dependency updates

Follows Single Responsibility Principle with focused workflows.
Includes security best practices, caching, and deployment automation.

* fix: Add missing Dockerfile and lint script for CI/CD workflows

- Add Dockerfile for multi-stage Node.js build with production optimizations
- Add lint script to package.json that runs TypeScript type checking
- Enable health check endpoint in Docker container
- Configure proper user permissions and security practices

Fixes docker-build workflow failures and enables complete CI/CD pipeline.

* fix: Enable Corepack for Yarn 4.x compatibility in Docker build

- Enable Corepack in Dockerfile to support packageManager field
- Fix lint script to use TypeScript checking instead of invalid yarn check
- Remove manual yarn installation from Dockerfile since Corepack handles it

* fix: Enable Corepack in CI workflows to resolve Yarn version conflicts

* chore: Update to latest GitHub Actions versions

- Update actions/checkout to v6
- Update actions/setup-node to v6
- Update actions/upload-artifact to v5
- Update Node.js to version 22 (Active LTS)
- Update Docker base images to node:22-alpine

* Fix Corepack/Yarn caching issue in CI workflows

- Remove cache: yarn from setup-node action to prevent yarn usage before corepack enable
- Enable corepack immediately after Node.js setup
- Add manual yarn caching using actions/cache@v4 with proper cache directory path
- This resolves the packageManager field conflict in CI

* Fix BlogEdit.tsx import and component issues

- Fix import path from @/api/blog-api to @/lib/api/blog-api
- Replace TagManager component with simple tag input since BlogEdit uses plain state
- Remove unused handleTagsChange function
- This resolves the build error where blog-api file was not found

* Fix Yarn 4.x deprecated commands in Dockerfile

- Replace --frozen-lockfile with --immutable in builder stage
- Replace --frozen-lockfile --production with --immutable + autoclean in production stage
- This resolves the Yarn 4.9.0 deprecation warnings and build failures

* fix: optimize Dockerfile to use Yarn PnP instead of node-modules

- Use Yarn Plug'n'Play (PnP) for faster installs and smaller image size
- Keep .yarnrc.yml configuration instead of overriding it
- Copy PnP files (.pnp.cjs, .pnp.loader.mjs, .yarn cache) to production stage
- Use yarn workspaces focus --production for production dependencies
- Corepack manages Yarn version while PnP handles dependency resolution

* fix: correct CI/CD workflow issues

- Fix lint.yml to use 'yarn check' instead of 'yarn lint' (ESLint not configured)
- Fix Dockerfile to use 'yarn install --production' for single package repo
- Update workflow name to reflect actual functionality
2025-11-27 06:58:03 +01:00

61 lines
2.1 KiB
YAML

name: Deploy
on:
push:
tags: ["v*"]
workflow_dispatch:
inputs:
version:
description: "Version to deploy (e.g., v1.2.3)"
required: true
type: string
jobs:
deploy-production:
name: Deploy to Production
runs-on: ubuntu-latest
environment:
name: production
url: https://tercul.example.com
steps:
- name: Check out code
uses: actions/checkout@v6
- name: Extract version
id: version
run: |
if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
echo "VERSION=${{ inputs.version }}" >> $GITHUB_OUTPUT
else
echo "VERSION=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
fi
- name: Deploy to Docker Swarm
env:
SWARM_HOST: ${{ secrets.SWARM_HOST }}
SWARM_SSH_KEY: ${{ secrets.SWARM_SSH_KEY }}
IMAGE_TAG: ${{ steps.version.outputs.VERSION }}
run: |
# Uncomment and configure for actual Docker Swarm deployment
# echo "$SWARM_SSH_KEY" > swarm_key
# chmod 600 swarm_key
# ssh -i swarm_key -o StrictHostKeyChecking=no \
# deploy@$SWARM_HOST \
# "docker service update \
# --image ghcr.io/${{ github.repository }}-frontend:${IMAGE_TAG} \
# tercul-frontend"
# rm swarm_key
echo "Deploying frontend version ${{ steps.version.outputs.VERSION }} to production"
echo "Image: ghcr.io/${{ github.repository }}-frontend:${IMAGE_TAG}"
- name: Deployment summary
run: |
echo "### Frontend Deployment Complete :rocket:" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "- **Version**: ${{ steps.version.outputs.VERSION }}" >> $GITHUB_STEP_SUMMARY
echo "- **Image**: ghcr.io/${{ github.repository }}-frontend:${{ steps.version.outputs.VERSION }}" >> $GITHUB_STEP_SUMMARY
echo "- **Environment**: Production" >> $GITHUB_STEP_SUMMARY
echo "- **Deployed at**: $(date -u +'%Y-%m-%d %H:%M:%S UTC')" >> $GITHUB_STEP_SUMMARY