Update Docker configuration and add Gitea CI/CD workflows
Some checks failed
CI/CD Pipeline / test (push) Successful in 12m0s
CI/CD Pipeline / security (push) Failing after 6m6s
CI/CD Pipeline / build (push) Has been skipped
CI/CD Pipeline / deploy (push) Has been skipped

- Change Docker image in docker-compose.prod.yml to use 'portfolio-app:latest'.
- Add new scripts for Gitea deployment and setup of Gitea runner.
- Introduce CI/CD workflows for automated testing, security scanning, and deployment in Gitea.
- Enhance package.json with new deployment scripts for Gitea integration.
This commit is contained in:
2025-09-10 15:14:55 +02:00
parent 07cf999a9e
commit 09d925745d
6 changed files with 582 additions and 1 deletions

126
.gitea/workflows/ci-cd.yml Normal file
View File

@@ -0,0 +1,126 @@
name: CI/CD Pipeline
on:
push:
branches: [ main, production ]
pull_request:
branches: [ main, production ]
env:
NODE_VERSION: '20'
DOCKER_IMAGE: portfolio-app
CONTAINER_NAME: portfolio-app
jobs:
test:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: ${{ env.NODE_VERSION }}
cache: 'npm'
- name: Install dependencies
run: npm ci
- name: Run linting
run: npm run lint
- name: Run tests
run: npm run test
- name: Build application
run: npm run build
security:
runs-on: ubuntu-latest
needs: test
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
scan-type: 'fs'
scan-ref: '.'
format: 'sarif'
output: 'trivy-results.sarif'
build:
runs-on: ubuntu-latest
needs: [test, security]
if: github.ref == 'refs/heads/production'
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Build Docker image
run: |
docker build -t ${{ env.DOCKER_IMAGE }}:latest .
docker tag ${{ env.DOCKER_IMAGE }}:latest ${{ env.DOCKER_IMAGE }}:$(date +%Y%m%d-%H%M%S)
- name: Save Docker image
run: |
docker save ${{ env.DOCKER_IMAGE }}:latest | gzip > ${{ env.DOCKER_IMAGE }}.tar.gz
- name: Upload Docker image artifact
uses: actions/upload-artifact@v4
with:
name: docker-image
path: ${{ env.DOCKER_IMAGE }}.tar.gz
retention-days: 7
deploy:
runs-on: ubuntu-latest
needs: build
if: github.ref == 'refs/heads/production'
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Download Docker image artifact
uses: actions/download-artifact@v4
with:
name: docker-image
path: ./
- name: Load Docker image
run: |
gunzip -c ${{ env.DOCKER_IMAGE }}.tar.gz | docker load
- name: Stop existing container
run: |
docker stop ${{ env.CONTAINER_NAME }} || true
docker rm ${{ env.CONTAINER_NAME }} || true
- name: Start new container
run: |
docker run -d \
--name ${{ env.CONTAINER_NAME }} \
--restart unless-stopped \
-p 3000:3000 \
-e NODE_ENV=production \
${{ env.DOCKER_IMAGE }}:latest
- name: Wait for container to be ready
run: |
sleep 10
timeout 60 bash -c 'until curl -f http://localhost:3000/api/health; do sleep 2; done'
- name: Health check
run: |
curl -f http://localhost:3000/api/health
echo "✅ Deployment successful!"
- name: Cleanup old images
run: |
docker image prune -f
docker system prune -f

View File

@@ -0,0 +1,54 @@
name: Quick Deploy
on:
push:
branches: [ main ]
workflow_dispatch:
env:
NODE_VERSION: '20'
DOCKER_IMAGE: portfolio-app
CONTAINER_NAME: portfolio-app
jobs:
quick-deploy:
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: ${{ env.NODE_VERSION }}
cache: 'npm'
- name: Install dependencies
run: npm ci
- name: Build application
run: npm run build
- name: Build Docker image
run: |
docker build -t ${{ env.DOCKER_IMAGE }}:latest .
- name: Stop existing container
run: |
docker stop ${{ env.CONTAINER_NAME }} || true
docker rm ${{ env.CONTAINER_NAME }} || true
- name: Start new container
run: |
docker run -d \
--name ${{ env.CONTAINER_NAME }} \
--restart unless-stopped \
-p 3000:3000 \
-e NODE_ENV=production \
${{ env.DOCKER_IMAGE }}:latest
- name: Health check
run: |
sleep 10
curl -f http://localhost:3000/api/health
echo "✅ Quick deployment successful!"

View File

@@ -1,6 +1,6 @@
services: services:
portfolio: portfolio:
image: ghcr.io/denshooter/my_portfolio:production image: portfolio-app:latest
container_name: portfolio-app container_name: portfolio-app
restart: unless-stopped restart: unless-stopped
ports: ports:

View File

@@ -32,6 +32,8 @@
"deploy": "./scripts/deploy.sh", "deploy": "./scripts/deploy.sh",
"auto-deploy": "./scripts/auto-deploy.sh", "auto-deploy": "./scripts/auto-deploy.sh",
"quick-deploy": "./scripts/quick-deploy.sh", "quick-deploy": "./scripts/quick-deploy.sh",
"gitea-deploy": "./scripts/gitea-deploy.sh",
"setup-gitea-runner": "./scripts/setup-gitea-runner.sh",
"monitor": "./scripts/monitor.sh", "monitor": "./scripts/monitor.sh",
"health": "curl -f http://localhost:3000/api/health" "health": "curl -f http://localhost:3000/api/health"
}, },

207
scripts/gitea-deploy.sh Executable file
View File

@@ -0,0 +1,207 @@
#!/bin/bash
# Gitea-specific deployment script
# Optimiert für lokalen Gitea Runner
set -e
# Configuration
PROJECT_NAME="portfolio"
CONTAINER_NAME="portfolio-app"
IMAGE_NAME="portfolio-app"
PORT=3000
BACKUP_PORT=3001
LOG_FILE="./logs/gitea-deploy.log"
# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color
# Logging function
log() {
echo -e "${BLUE}[$(date +'%Y-%m-%d %H:%M:%S')]${NC} $1" | tee -a "$LOG_FILE"
}
error() {
echo -e "${RED}[ERROR]${NC} $1" | tee -a "$LOG_FILE"
}
success() {
echo -e "${GREEN}[SUCCESS]${NC} $1" | tee -a "$LOG_FILE"
}
warning() {
echo -e "${YELLOW}[WARNING]${NC} $1" | tee -a "$LOG_FILE"
}
# Check if running as root
if [[ $EUID -eq 0 ]]; then
error "This script should not be run as root"
exit 1
fi
# Check if Docker is running
if ! docker info > /dev/null 2>&1; then
error "Docker is not running. Please start Docker and try again."
exit 1
fi
# Check if we're in the right directory
if [ ! -f "package.json" ] || [ ! -f "Dockerfile" ]; then
error "Please run this script from the project root directory"
exit 1
fi
log "🚀 Starting Gitea deployment for $PROJECT_NAME"
# Step 1: Code Quality Checks
log "📋 Step 1: Running code quality checks..."
# Run linting
log "🔍 Running ESLint..."
npm run lint || {
error "ESLint failed. Please fix the issues before deploying."
exit 1
}
# Run tests
log "🧪 Running tests..."
npm run test || {
error "Tests failed. Please fix the issues before deploying."
exit 1
}
success "✅ Code quality checks passed"
# Step 2: Build Application
log "🔨 Step 2: Building application..."
# Build Next.js application
log "📦 Building Next.js application..."
npm run build || {
error "Build failed"
exit 1
}
success "✅ Application built successfully"
# Step 3: Docker Operations
log "🐳 Step 3: Docker operations..."
# Build Docker image
log "🏗️ Building Docker image..."
docker build -t "$IMAGE_NAME:latest" . || {
error "Docker build failed"
exit 1
}
# Tag with timestamp
TIMESTAMP=$(date +%Y%m%d-%H%M%S)
docker tag "$IMAGE_NAME:latest" "$IMAGE_NAME:$TIMESTAMP"
success "✅ Docker image built successfully"
# Step 4: Deployment
log "🚀 Step 4: Deploying application..."
# Check if container is running
if [ "$(docker inspect -f '{{.State.Running}}' "$CONTAINER_NAME" 2>/dev/null)" = "true" ]; then
log "📦 Stopping existing container..."
docker stop "$CONTAINER_NAME" || true
docker rm "$CONTAINER_NAME" || true
fi
# Check if port is available
if lsof -Pi :$PORT -sTCP:LISTEN -t >/dev/null ; then
warning "Port $PORT is in use. Trying backup port $BACKUP_PORT"
DEPLOY_PORT=$BACKUP_PORT
else
DEPLOY_PORT=$PORT
fi
# Start new container
log "🚀 Starting new container on port $DEPLOY_PORT..."
docker run -d \
--name "$CONTAINER_NAME" \
--restart unless-stopped \
-p "$DEPLOY_PORT:3000" \
-e NODE_ENV=production \
"$IMAGE_NAME:latest" || {
error "Failed to start container"
exit 1
}
# Wait for container to be ready
log "⏳ Waiting for container to be ready..."
sleep 10
# Health check
log "🏥 Performing health check..."
HEALTH_CHECK_TIMEOUT=60
HEALTH_CHECK_INTERVAL=2
ELAPSED=0
while [ $ELAPSED -lt $HEALTH_CHECK_TIMEOUT ]; do
if curl -f "http://localhost:$DEPLOY_PORT/api/health" > /dev/null 2>&1; then
success "✅ Application is healthy!"
break
fi
sleep $HEALTH_CHECK_INTERVAL
ELAPSED=$((ELAPSED + HEALTH_CHECK_INTERVAL))
echo -n "."
done
if [ $ELAPSED -ge $HEALTH_CHECK_TIMEOUT ]; then
error "Health check timeout. Application may not be running properly."
log "Container logs:"
docker logs "$CONTAINER_NAME" --tail=50
exit 1
fi
# Step 5: Verification
log "✅ Step 5: Verifying deployment..."
# Test main page
if curl -f "http://localhost:$DEPLOY_PORT/" > /dev/null 2>&1; then
success "✅ Main page is accessible"
else
error "❌ Main page is not accessible"
exit 1
fi
# Show container status
log "📊 Container status:"
docker ps --filter "name=$CONTAINER_NAME" --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}"
# Show resource usage
log "📈 Resource usage:"
docker stats --no-stream --format "table {{.Container}}\t{{.CPUPerc}}\t{{.MemUsage}}" "$CONTAINER_NAME"
# Step 6: Cleanup
log "🧹 Step 6: Cleaning up old images..."
# Remove old images (keep last 3 versions)
docker images "$IMAGE_NAME" --format "table {{.Tag}}\t{{.ID}}" | tail -n +2 | head -n -3 | awk '{print $2}' | xargs -r docker rmi || {
warning "No old images to remove"
}
# Clean up unused Docker resources
docker system prune -f --volumes || {
warning "Failed to clean up Docker resources"
}
# Final success message
success "🎉 Gitea deployment completed successfully!"
log "🌐 Application is available at: http://localhost:$DEPLOY_PORT"
log "🏥 Health check endpoint: http://localhost:$DEPLOY_PORT/api/health"
log "📊 Container name: $CONTAINER_NAME"
log "📝 Logs: docker logs $CONTAINER_NAME"
# Update deployment log
echo "$(date): Gitea deployment successful - Port: $DEPLOY_PORT - Image: $IMAGE_NAME:$TIMESTAMP" >> "$LOG_FILE"
exit 0

192
scripts/setup-gitea-runner.sh Executable file
View File

@@ -0,0 +1,192 @@
#!/bin/bash
# Gitea Runner Setup Script
# Installiert und konfiguriert einen lokalen Gitea Runner
set -e
# Configuration
GITEA_URL="${GITEA_URL:-http://localhost:3000}"
RUNNER_NAME="${RUNNER_NAME:-portfolio-runner}"
RUNNER_LABELS="${RUNNER_LABELS:-ubuntu-latest,self-hosted,portfolio}"
RUNNER_WORK_DIR="${RUNNER_WORK_DIR:-/tmp/gitea-runner}"
# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color
# Logging function
log() {
echo -e "${BLUE}[$(date +'%Y-%m-%d %H:%M:%S')]${NC} $1"
}
error() {
echo -e "${RED}[ERROR]${NC} $1"
}
success() {
echo -e "${GREEN}[SUCCESS]${NC} $1"
}
warning() {
echo -e "${YELLOW}[WARNING]${NC} $1"
}
# Check if running as root
if [[ $EUID -eq 0 ]]; then
error "This script should not be run as root"
exit 1
fi
log "🚀 Setting up Gitea Runner for Portfolio"
# Check if Gitea URL is accessible
log "🔍 Checking Gitea server accessibility..."
if ! curl -f "$GITEA_URL" > /dev/null 2>&1; then
error "Cannot access Gitea server at $GITEA_URL"
error "Please make sure Gitea is running and accessible"
exit 1
fi
success "✅ Gitea server is accessible"
# Create runner directory
log "📁 Creating runner directory..."
mkdir -p "$RUNNER_WORK_DIR"
cd "$RUNNER_WORK_DIR"
# Download Gitea Runner
log "📥 Downloading Gitea Runner..."
RUNNER_VERSION="latest"
RUNNER_ARCH="linux-amd64"
# Get latest version
if [ "$RUNNER_VERSION" = "latest" ]; then
RUNNER_VERSION=$(curl -s https://api.github.com/repos/woodpecker-ci/woodpecker/releases/latest | grep -o '"tag_name": "[^"]*' | grep -o '[^"]*$')
fi
RUNNER_URL="https://github.com/woodpecker-ci/woodpecker/releases/download/${RUNNER_VERSION}/woodpecker-agent_${RUNNER_VERSION}_${RUNNER_ARCH}.tar.gz"
log "Downloading from: $RUNNER_URL"
curl -L -o woodpecker-agent.tar.gz "$RUNNER_URL"
# Extract runner
log "📦 Extracting Gitea Runner..."
tar -xzf woodpecker-agent.tar.gz
chmod +x woodpecker-agent
success "✅ Gitea Runner downloaded and extracted"
# Create systemd service
log "⚙️ Creating systemd service..."
sudo tee /etc/systemd/system/gitea-runner.service > /dev/null <<EOF
[Unit]
Description=Gitea Runner for Portfolio
After=network.target
[Service]
Type=simple
User=$USER
WorkingDirectory=$RUNNER_WORK_DIR
ExecStart=$RUNNER_WORK_DIR/woodpecker-agent
Restart=always
RestartSec=5
Environment=WOODPECKER_SERVER=$GITEA_URL
Environment=WOODPECKER_AGENT_SECRET=
Environment=WOODPECKER_LOG_LEVEL=info
[Install]
WantedBy=multi-user.target
EOF
# Reload systemd
sudo systemctl daemon-reload
success "✅ Systemd service created"
# Instructions for manual registration
log "📋 Manual registration required:"
echo ""
echo "1. Go to your Gitea instance: $GITEA_URL"
echo "2. Navigate to: Settings → Actions → Runners"
echo "3. Click 'Create new Runner'"
echo "4. Copy the registration token"
echo "5. Run the following command:"
echo ""
echo " cd $RUNNER_WORK_DIR"
echo " ./woodpecker-agent register --server $GITEA_URL --token YOUR_TOKEN"
echo ""
echo "6. After registration, start the service:"
echo " sudo systemctl enable gitea-runner"
echo " sudo systemctl start gitea-runner"
echo ""
echo "7. Check status:"
echo " sudo systemctl status gitea-runner"
echo ""
# Create helper scripts
log "📝 Creating helper scripts..."
# Start script
cat > "$RUNNER_WORK_DIR/start-runner.sh" << 'EOF'
#!/bin/bash
echo "Starting Gitea Runner..."
sudo systemctl start gitea-runner
sudo systemctl status gitea-runner
EOF
# Stop script
cat > "$RUNNER_WORK_DIR/stop-runner.sh" << 'EOF'
#!/bin/bash
echo "Stopping Gitea Runner..."
sudo systemctl stop gitea-runner
EOF
# Status script
cat > "$RUNNER_WORK_DIR/status-runner.sh" << 'EOF'
#!/bin/bash
echo "Gitea Runner Status:"
sudo systemctl status gitea-runner
echo ""
echo "Logs (last 20 lines):"
sudo journalctl -u gitea-runner -n 20 --no-pager
EOF
# Logs script
cat > "$RUNNER_WORK_DIR/logs-runner.sh" << 'EOF'
#!/bin/bash
echo "Gitea Runner Logs:"
sudo journalctl -u gitea-runner -f
EOF
chmod +x "$RUNNER_WORK_DIR"/*.sh
success "✅ Helper scripts created"
# Create environment file
cat > "$RUNNER_WORK_DIR/.env" << EOF
# Gitea Runner Configuration
GITEA_URL=$GITEA_URL
RUNNER_NAME=$RUNNER_NAME
RUNNER_LABELS=$RUNNER_LABELS
RUNNER_WORK_DIR=$RUNNER_WORK_DIR
EOF
log "📋 Setup Summary:"
echo " • Runner Directory: $RUNNER_WORK_DIR"
echo " • Gitea URL: $GITEA_URL"
echo " • Runner Name: $RUNNER_NAME"
echo " • Labels: $RUNNER_LABELS"
echo " • Helper Scripts: $RUNNER_WORK_DIR/*.sh"
echo ""
log "🎯 Next Steps:"
echo "1. Register the runner in Gitea web interface"
echo "2. Enable and start the service"
echo "3. Test with a workflow run"
echo ""
success "🎉 Gitea Runner setup completed!"
log "📁 All files are in: $RUNNER_WORK_DIR"