feat: Setup zero-downtime deployments for production and dev branches

- Created separate workflows for production and dev deployments
- Production branch → dk0.dev (port 3000)
- Dev branch → dev.dk0.dev (port 3002)
- Zero-downtime deployment pattern (start new, wait for health, remove old)
- Complete isolation between environments (separate containers, databases, networks)
- Cleaned up unused code and files:
  - Removed unused GhostEditor and ResizableGhostEditor components
  - Removed old/unused workflows and markdown files
  - Fixed docker-compose references
- Upgraded dependencies to latest compatible versions
- Fixed TypeScript errors in editor page
- Updated staging to use dev.dk0.dev domain

.gitea/workflows/ci-cd-dev-staging.yml

@@ -1,209 +0,0 @@
-name: CI/CD Pipeline (Dev/Staging)
-
-on:
-  push:
-    branches: [dev, main]
-
-env:
-  NODE_VERSION: '20'
-  DOCKER_IMAGE: portfolio-app
-  CONTAINER_NAME: portfolio-app-staging
-
-jobs:
-  staging:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: 'npm'
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Run linting
-        run: npm run lint
-
-      - name: Run tests
-        run: npm run test:production
-
-      - name: Build application
-        run: npm run build
-
-      - name: Run security scan
-        run: |
-          echo "🔍 Running npm audit..."
-          npm audit --audit-level=high || echo "⚠️ Some vulnerabilities found, but continuing..."
-
-      - name: Verify Gitea Variables and Secrets
-        run: |
-          echo "🔍 Verifying Gitea Variables and Secrets..."
-          
-          # Check Variables
-          if [ -z "${{ vars.NEXT_PUBLIC_BASE_URL }}" ]; then
-            echo "❌ NEXT_PUBLIC_BASE_URL variable is missing!"
-            echo "Please set this variable in Gitea repository settings"
-            exit 1
-          fi
-          if [ -z "${{ vars.MY_EMAIL }}" ]; then
-            echo "❌ MY_EMAIL variable is missing!"
-            echo "Please set this variable in Gitea repository settings"
-            exit 1
-          fi
-          if [ -z "${{ vars.MY_INFO_EMAIL }}" ]; then
-            echo "❌ MY_INFO_EMAIL variable is missing!"
-            echo "Please set this variable in Gitea repository settings"
-            exit 1
-          fi
-          
-          # Check Secrets
-          if [ -z "${{ secrets.MY_PASSWORD }}" ]; then
-            echo "❌ MY_PASSWORD secret is missing!"
-            echo "Please set this secret in Gitea repository settings"
-            exit 1
-          fi
-          if [ -z "${{ secrets.MY_INFO_PASSWORD }}" ]; then
-            echo "❌ MY_INFO_PASSWORD secret is missing!"
-            echo "Please set this secret in Gitea repository settings"
-            exit 1
-          fi
-          if [ -z "${{ secrets.ADMIN_BASIC_AUTH }}" ]; then
-            echo "❌ ADMIN_BASIC_AUTH secret is missing!"
-            echo "Please set this secret in Gitea repository settings"
-            exit 1
-          fi
-          
-          echo "✅ All required Gitea variables and secrets are present"
-          echo "📝 Variables found:"
-          echo "  - NEXT_PUBLIC_BASE_URL: ${{ vars.NEXT_PUBLIC_BASE_URL }}"
-          echo "  - MY_EMAIL: ${{ vars.MY_EMAIL }}"
-          echo "  - MY_INFO_EMAIL: ${{ vars.MY_INFO_EMAIL }}"
-          echo "  - NODE_ENV: staging"
-          echo "  - LOG_LEVEL: ${{ vars.LOG_LEVEL }}"
-
-      - name: Build Docker image
-        run: |
-          echo "🏗️ Building Docker image..."
-          docker build -t ${{ env.DOCKER_IMAGE }}:staging .
-          docker tag ${{ env.DOCKER_IMAGE }}:staging ${{ env.DOCKER_IMAGE }}:staging-$(date +%Y%m%d-%H%M%S)
-          echo "✅ Docker image built successfully"
-
-      - name: Deploy Staging using Gitea Variables and Secrets
-        run: |
-          echo "🚀 Deploying Staging using Gitea Variables and Secrets..."
-          
-          echo "📝 Using Gitea Variables and Secrets:"
-          echo "  - NODE_ENV: staging"
-          echo "  - LOG_LEVEL: ${LOG_LEVEL}"
-          echo "  - NEXT_PUBLIC_BASE_URL: ${NEXT_PUBLIC_BASE_URL}"
-          echo "  - MY_EMAIL: ${MY_EMAIL}"
-          echo "  - MY_INFO_EMAIL: ${MY_INFO_EMAIL}"
-          echo "  - MY_PASSWORD: [SET FROM GITEA SECRET]"
-          echo "  - MY_INFO_PASSWORD: [SET FROM GITEA SECRET]"
-          echo "  - ADMIN_BASIC_AUTH: [SET FROM GITEA SECRET]"
-          echo "  - N8N_WEBHOOK_URL: ${N8N_WEBHOOK_URL}"
-          
-          # Stop old staging containers
-          echo "🛑 Stopping old staging containers..."
-          docker compose -f docker-compose.staging.yml down || true
-          
-          # Clean up orphaned containers
-          echo "🧹 Cleaning up orphaned containers..."
-          docker compose -f docker-compose.staging.yml down --remove-orphans || true
-          
-          # Start new staging containers
-          echo "🚀 Starting new staging containers..."
-          docker compose -f docker-compose.staging.yml up -d
-          
-          # Wait a moment for containers to start
-          echo "⏳ Waiting for containers to start..."
-          sleep 10
-          
-          # Check container logs for debugging
-          echo "📋 Container logs (first 20 lines):"
-          docker compose -f docker-compose.staging.yml logs --tail=20
-          
-          echo "✅ Staging deployment completed!"
-        env:
-          NODE_ENV: staging
-          LOG_LEVEL: ${{ vars.LOG_LEVEL }}
-          NEXT_PUBLIC_BASE_URL: ${{ vars.NEXT_PUBLIC_BASE_URL }}
-          NEXT_PUBLIC_UMAMI_URL: ${{ vars.NEXT_PUBLIC_UMAMI_URL }}
-          NEXT_PUBLIC_UMAMI_WEBSITE_ID: ${{ vars.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}
-          MY_EMAIL: ${{ vars.MY_EMAIL }}
-          MY_INFO_EMAIL: ${{ vars.MY_INFO_EMAIL }}
-          MY_PASSWORD: ${{ secrets.MY_PASSWORD }}
-          MY_INFO_PASSWORD: ${{ secrets.MY_INFO_PASSWORD }}
-          ADMIN_BASIC_AUTH: ${{ secrets.ADMIN_BASIC_AUTH }}
-          N8N_WEBHOOK_URL: ${{ vars.N8N_WEBHOOK_URL }}
-          N8N_API_KEY: ${{ secrets.N8N_API_KEY }}
-
-      - name: Wait for containers to be ready
-        run: |
-          echo "⏳ Waiting for containers to be ready..."
-          sleep 45
-          
-          # Check if all containers are running
-          echo "📊 Checking container status..."
-          docker compose -f docker-compose.staging.yml ps
-          
-          # Wait for application container to be healthy
-          echo "🏥 Waiting for application container to be healthy..."
-          for i in {1..60}; do
-            if docker exec portfolio-app-staging curl -f http://localhost:3000/api/health > /dev/null 2>&1; then
-              echo "✅ Application container is healthy!"
-              break
-            fi
-            echo "⏳ Waiting for application container... ($i/60)"
-            sleep 5
-          done
-          
-          # Additional wait for main page to be accessible
-          echo "🌐 Waiting for main page to be accessible..."
-          for i in {1..30}; do
-            if curl -f http://localhost:3001/ > /dev/null 2>&1; then
-              echo "✅ Main page is accessible!"
-              break
-            fi
-            echo "⏳ Waiting for main page... ($i/30)"
-            sleep 3
-          done
-
-      - name: Health check
-        run: |
-          echo "🔍 Running comprehensive health checks..."
-          
-          # Check container status
-          echo "📊 Container status:"
-          docker compose -f docker-compose.staging.yml ps
-          
-          # Check application container
-          echo "🏥 Checking application container..."
-          if docker exec portfolio-app-staging curl -f http://localhost:3000/api/health; then
-            echo "✅ Application health check passed!"
-          else
-            echo "❌ Application health check failed!"
-            docker logs portfolio-app-staging --tail=50
-            exit 1
-          fi
-          
-          # Check main page
-          if curl -f http://localhost:3001/ > /dev/null; then
-            echo "✅ Main page is accessible!"
-          else
-            echo "❌ Main page is not accessible!"
-            exit 1
-          fi
-          
-          echo "✅ All health checks passed! Staging deployment successful!"
-
-      - name: Cleanup old images
-        run: |
-          echo "🧹 Cleaning up old images..."
-          docker image prune -f
-          docker system prune -f
-          echo "✅ Cleanup completed"

.gitea/workflows/ci-cd-woodpecker.yml

@@ -1,232 +0,0 @@
-name: CI/CD Pipeline (Woodpecker)
-
-when:
-  event: push
-  branch: production
-
-steps:
-  build:
-    image: node:20-alpine
-    commands:
-      - echo "🚀 Starting CI/CD Pipeline"
-      - echo "📋 Step 1: Installing dependencies..."
-      - npm ci --prefer-offline --no-audit
-      - echo "🔍 Step 2: Running linting..."
-      - npm run lint
-      - echo "🧪 Step 3: Running tests..."
-      - npm run test
-      - echo "🏗️ Step 4: Building application..."
-      - npm run build
-      - echo "🔒 Step 5: Running security scan..."
-      - npm audit --audit-level=high || echo "⚠️ Some vulnerabilities found, but continuing..."
-    volumes:
-      - node_modules:/app/node_modules
-
-  docker-build:
-    image: docker:latest
-    commands:
-      - echo "🐳 Building Docker image..."
-      - docker build -t portfolio-app:latest .
-      - docker tag portfolio-app:latest portfolio-app:$(date +%Y%m%d-%H%M%S)
-    volumes:
-      - /var/run/docker.sock:/var/run/docker.sock
-
-  deploy:
-    image: docker:latest
-    commands:
-      - echo "🚀 Deploying application..."
-      
-      # Verify secrets and variables
-      - echo "🔍 Verifying secrets and variables..."
-      - |
-        if [ -z "$NEXT_PUBLIC_BASE_URL" ]; then
-          echo "❌ NEXT_PUBLIC_BASE_URL variable is missing!"
-          exit 1
-        fi
-        if [ -z "$MY_EMAIL" ]; then
-          echo "❌ MY_EMAIL variable is missing!"
-          exit 1
-        fi
-        if [ -z "$MY_INFO_EMAIL" ]; then
-          echo "❌ MY_INFO_EMAIL variable is missing!"
-          exit 1
-        fi
-        if [ -z "$MY_PASSWORD" ]; then
-          echo "❌ MY_PASSWORD secret is missing!"
-          exit 1
-        fi
-        if [ -z "$MY_INFO_PASSWORD" ]; then
-          echo "❌ MY_INFO_PASSWORD secret is missing!"
-          exit 1
-        fi
-        if [ -z "$ADMIN_BASIC_AUTH" ]; then
-          echo "❌ ADMIN_BASIC_AUTH secret is missing!"
-          exit 1
-        fi
-        echo "✅ All required secrets and variables are present"
-      
-      # Check if current container is running
-      - |
-        if docker ps -q -f name=portfolio-app | grep -q .; then
-          echo "📊 Current container is running, proceeding with zero-downtime update"
-          CURRENT_CONTAINER_RUNNING=true
-        else
-          echo "📊 No current container running, doing fresh deployment"
-          CURRENT_CONTAINER_RUNNING=false
-        fi
-      
-      # Ensure database and redis are running
-      - echo "🔧 Ensuring database and redis are running..."
-      - docker compose up -d postgres redis
-      - sleep 10
-      
-      # Deploy with zero downtime
-      - |
-        if [ "$CURRENT_CONTAINER_RUNNING" = "true" ]; then
-          echo "🔄 Performing rolling update..."
-          
-          # Generate unique container name
-          TIMESTAMP=$(date +%s)
-          TEMP_CONTAINER_NAME="portfolio-app-temp-$TIMESTAMP"
-          echo "🔧 Using temporary container name: $TEMP_CONTAINER_NAME"
-          
-          # Clean up any existing temporary containers
-          echo "🧹 Cleaning up any existing temporary containers..."
-          docker rm -f portfolio-app-new portfolio-app-temp-* portfolio-app-backup || true
-          
-          # Find and remove any containers with portfolio-app in the name (except the main one)
-          EXISTING_CONTAINERS=$(docker ps -a --format "table {{.Names}}" | grep "portfolio-app" | grep -v "^portfolio-app$" || true)
-          if [ -n "$EXISTING_CONTAINERS" ]; then
-            echo "🗑️ Removing existing portfolio-app containers:"
-            echo "$EXISTING_CONTAINERS"
-            echo "$EXISTING_CONTAINERS" | xargs -r docker rm -f || true
-          fi
-          
-          # Also clean up any stopped containers
-          docker container prune -f || true
-          
-          # Start new container with unique temporary name
-          docker run -d \
-            --name $TEMP_CONTAINER_NAME \
-            --restart unless-stopped \
-            --network portfolio_net \
-            -e NODE_ENV=$NODE_ENV \
-            -e LOG_LEVEL=$LOG_LEVEL \
-            -e DATABASE_URL=postgresql://portfolio_user:portfolio_pass@postgres:5432/portfolio_db?schema=public \
-            -e REDIS_URL=redis://redis:6379 \
-            -e NEXT_PUBLIC_BASE_URL="$NEXT_PUBLIC_BASE_URL" \
-            -e NEXT_PUBLIC_UMAMI_URL="$NEXT_PUBLIC_UMAMI_URL" \
-            -e NEXT_PUBLIC_UMAMI_WEBSITE_ID="$NEXT_PUBLIC_UMAMI_WEBSITE_ID" \
-            -e MY_EMAIL="$MY_EMAIL" \
-            -e MY_INFO_EMAIL="$MY_INFO_EMAIL" \
-            -e MY_PASSWORD="$MY_PASSWORD" \
-            -e MY_INFO_PASSWORD="$MY_INFO_PASSWORD" \
-            -e ADMIN_BASIC_AUTH="$ADMIN_BASIC_AUTH" \
-            portfolio-app:latest
-          
-          # Wait for new container to be ready
-          echo "⏳ Waiting for new container to be ready..."
-          sleep 15
-          
-          # Health check new container
-          for i in {1..20}; do
-            if docker exec $TEMP_CONTAINER_NAME curl -f http://localhost:3000/api/health > /dev/null 2>&1; then
-              echo "✅ New container is healthy!"
-              break
-            fi
-            echo "⏳ Health check attempt $i/20..."
-            sleep 3
-          done
-          
-          # Stop old container
-          echo "🛑 Stopping old container..."
-          docker stop portfolio-app || true
-          docker rm portfolio-app || true
-          
-          # Rename new container
-          docker rename $TEMP_CONTAINER_NAME portfolio-app
-          
-          # Update port mapping
-          docker stop portfolio-app
-          docker rm portfolio-app
-          
-          # Start with correct port
-          docker run -d \
-            --name portfolio-app \
-            --restart unless-stopped \
-            --network portfolio_net \
-            -p 3000:3000 \
-            -e NODE_ENV=$NODE_ENV \
-            -e LOG_LEVEL=$LOG_LEVEL \
-            -e DATABASE_URL=postgresql://portfolio_user:portfolio_pass@postgres:5432/portfolio_db?schema=public \
-            -e REDIS_URL=redis://redis:6379 \
-            -e NEXT_PUBLIC_BASE_URL="$NEXT_PUBLIC_BASE_URL" \
-            -e NEXT_PUBLIC_UMAMI_URL="$NEXT_PUBLIC_UMAMI_URL" \
-            -e NEXT_PUBLIC_UMAMI_WEBSITE_ID="$NEXT_PUBLIC_UMAMI_WEBSITE_ID" \
-            -e MY_EMAIL="$MY_EMAIL" \
-            -e MY_INFO_EMAIL="$MY_INFO_EMAIL" \
-            -e MY_PASSWORD="$MY_PASSWORD" \
-            -e MY_INFO_PASSWORD="$MY_INFO_PASSWORD" \
-            -e ADMIN_BASIC_AUTH="$ADMIN_BASIC_AUTH" \
-            portfolio-app:latest
-            
-          echo "✅ Rolling update completed!"
-        else
-          echo "🆕 Fresh deployment..."
-          docker compose up -d
-        fi
-      
-      # Wait for container to be ready
-      - echo "⏳ Waiting for container to be ready..."
-      - sleep 15
-      
-      # Health check
-      - |
-        echo "🏥 Performing health check..."
-        for i in {1..40}; do
-          if curl -f http://localhost:3000/api/health > /dev/null 2>&1; then
-            echo "✅ Application is healthy!"
-            break
-          fi
-          echo "⏳ Health check attempt $i/40..."
-          sleep 3
-        done
-      
-      # Final verification
-      - echo "🔍 Final health verification..."
-      - docker ps --filter "name=portfolio-app" --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}"
-      - |
-        if curl -f http://localhost:3000/api/health; then
-          echo "✅ Health endpoint accessible"
-        else
-          echo "❌ Health endpoint not accessible"
-          exit 1
-        fi
-      - |
-        if curl -f http://localhost:3000/ > /dev/null; then
-          echo "✅ Main page is accessible"
-        else
-          echo "❌ Main page is not accessible"
-          exit 1
-        fi
-      - echo "✅ Deployment successful!"
-      
-      # Cleanup
-      - docker image prune -f
-      - docker system prune -f
-    volumes:
-      - /var/run/docker.sock:/var/run/docker.sock
-    environment:
-      - NODE_ENV
-      - LOG_LEVEL
-      - NEXT_PUBLIC_BASE_URL
-      - NEXT_PUBLIC_UMAMI_URL
-      - NEXT_PUBLIC_UMAMI_WEBSITE_ID
-      - MY_EMAIL
-      - MY_INFO_EMAIL
-      - MY_PASSWORD
-      - MY_INFO_PASSWORD
-      - ADMIN_BASIC_AUTH
-
-volumes:
-  node_modules:

.gitea/workflows/debug-secrets.yml

@@ -1,123 +0,0 @@
-name: Debug Secrets
-
-on:
-  workflow_dispatch:
-  push:
-    branches: [ main ]
-
-jobs:
-  debug-secrets:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-
-      - name: Debug Environment Variables
-        run: |
-          echo "🔍 Checking if secrets are available..."
-          echo ""
-          
-          echo "📊 VARIABLES:"
-          echo "✅ NODE_ENV: ${{ vars.NODE_ENV }}"
-          echo "✅ LOG_LEVEL: ${{ vars.LOG_LEVEL }}"
-          echo "✅ NEXT_PUBLIC_BASE_URL: ${{ vars.NEXT_PUBLIC_BASE_URL }}"
-          echo "✅ NEXT_PUBLIC_UMAMI_URL: ${{ vars.NEXT_PUBLIC_UMAMI_URL }}"
-          echo "✅ NEXT_PUBLIC_UMAMI_WEBSITE_ID: ${{ vars.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}"
-          echo "✅ MY_EMAIL: ${{ vars.MY_EMAIL }}"
-          echo "✅ MY_INFO_EMAIL: ${{ vars.MY_INFO_EMAIL }}"
-          
-          echo ""
-          echo "🔐 SECRETS:"
-          if [ -n "${{ secrets.MY_PASSWORD }}" ]; then
-            echo "✅ MY_PASSWORD: Set (length: ${#MY_PASSWORD})"
-          else
-            echo "❌ MY_PASSWORD: Not set"
-          fi
-          
-          if [ -n "${{ secrets.MY_INFO_PASSWORD }}" ]; then
-            echo "✅ MY_INFO_PASSWORD: Set (length: ${#MY_INFO_PASSWORD})"
-          else
-            echo "❌ MY_INFO_PASSWORD: Not set"
-          fi
-          
-          if [ -n "${{ secrets.ADMIN_BASIC_AUTH }}" ]; then
-            echo "✅ ADMIN_BASIC_AUTH: Set (length: ${#ADMIN_BASIC_AUTH})"
-          else
-            echo "❌ ADMIN_BASIC_AUTH: Not set"
-          fi
-          
-          echo ""
-          echo "📋 Summary:"
-          echo "Variables: 7 configured"
-          echo "Secrets: 3 configured"
-          echo "Total environment variables: 10"
-        env:
-          NODE_ENV: ${{ vars.NODE_ENV }}
-          LOG_LEVEL: ${{ vars.LOG_LEVEL }}
-          NEXT_PUBLIC_BASE_URL: ${{ vars.NEXT_PUBLIC_BASE_URL }}
-          NEXT_PUBLIC_UMAMI_URL: ${{ vars.NEXT_PUBLIC_UMAMI_URL }}
-          NEXT_PUBLIC_UMAMI_WEBSITE_ID: ${{ vars.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}
-          MY_EMAIL: ${{ vars.MY_EMAIL }}
-          MY_INFO_EMAIL: ${{ vars.MY_INFO_EMAIL }}
-          MY_PASSWORD: ${{ secrets.MY_PASSWORD }}
-          MY_INFO_PASSWORD: ${{ secrets.MY_INFO_PASSWORD }}
-          ADMIN_BASIC_AUTH: ${{ secrets.ADMIN_BASIC_AUTH }}
-
-      - name: Test Docker Environment
-        run: |
-          echo "🐳 Testing Docker environment with secrets..."
-          
-          # Create a test container to verify environment variables
-          docker run --rm \
-            -e NODE_ENV=production \
-            -e DATABASE_URL=postgresql://portfolio_user:portfolio_pass@postgres:5432/portfolio_db?schema=public \
-            -e REDIS_URL=redis://redis:6379 \
-            -e NEXT_PUBLIC_BASE_URL="${{ secrets.NEXT_PUBLIC_BASE_URL }}" \
-            -e MY_EMAIL="${{ secrets.MY_EMAIL }}" \
-            -e MY_INFO_EMAIL="${{ secrets.MY_INFO_EMAIL }}" \
-            -e MY_PASSWORD="${{ secrets.MY_PASSWORD }}" \
-            -e MY_INFO_PASSWORD="${{ secrets.MY_INFO_PASSWORD }}" \
-            -e ADMIN_BASIC_AUTH="${{ secrets.ADMIN_BASIC_AUTH }}" \
-            alpine:latest sh -c '
-              echo "Environment variables in container:"
-              echo "NODE_ENV: $NODE_ENV"
-              echo "DATABASE_URL: $DATABASE_URL"
-              echo "REDIS_URL: $REDIS_URL"
-              echo "NEXT_PUBLIC_BASE_URL: $NEXT_PUBLIC_BASE_URL"
-              echo "MY_EMAIL: $MY_EMAIL"
-              echo "MY_INFO_EMAIL: $MY_INFO_EMAIL"
-              echo "MY_PASSWORD: [HIDDEN - length: ${#MY_PASSWORD}]"
-              echo "MY_INFO_PASSWORD: [HIDDEN - length: ${#MY_INFO_PASSWORD}]"
-              echo "ADMIN_BASIC_AUTH: [HIDDEN - length: ${#ADMIN_BASIC_AUTH}]"
-            '
-
-      - name: Validate Secret Formats
-        run: |
-          echo "🔐 Validating secret formats..."
-          
-          # Check NEXT_PUBLIC_BASE_URL format
-          if [[ "${{ secrets.NEXT_PUBLIC_BASE_URL }}" =~ ^https?:// ]]; then
-            echo "✅ NEXT_PUBLIC_BASE_URL: Valid URL format"
-          else
-            echo "❌ NEXT_PUBLIC_BASE_URL: Invalid URL format (should start with http:// or https://)"
-          fi
-          
-          # Check email formats
-          if [[ "${{ secrets.MY_EMAIL }}" =~ ^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$ ]]; then
-            echo "✅ MY_EMAIL: Valid email format"
-          else
-            echo "❌ MY_EMAIL: Invalid email format"
-          fi
-          
-          if [[ "${{ secrets.MY_INFO_EMAIL }}" =~ ^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$ ]]; then
-            echo "✅ MY_INFO_EMAIL: Valid email format"
-          else
-            echo "❌ MY_INFO_EMAIL: Invalid email format"
-          fi
-          
-          # Check ADMIN_BASIC_AUTH format (should be username:password)
-          if [[ "${{ secrets.ADMIN_BASIC_AUTH }}" =~ ^[^:]+:.+$ ]]; then
-            echo "✅ ADMIN_BASIC_AUTH: Valid format (username:password)"
-          else
-            echo "❌ ADMIN_BASIC_AUTH: Invalid format (should be username:password)"
-          fi

.gitea/workflows/dev-deploy.yml

@@ -0,0 +1,126 @@
+name: Dev Deployment (Zero Downtime)
+
+on:
+  push:
+    branches: [ dev ]
+
+env:
+  NODE_VERSION: '20'
+  DOCKER_IMAGE: portfolio-app
+  IMAGE_TAG: staging
+
+jobs:
+  deploy-dev:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run linting
+        run: npm run lint
+
+      - name: Run tests
+        run: npm run test
+
+      - name: Build application
+        run: npm run build
+
+      - name: Build Docker image
+        run: |
+          echo "🏗️ Building dev Docker image..."
+          docker build -t ${{ env.DOCKER_IMAGE }}:${{ env.IMAGE_TAG }} .
+          echo "✅ Docker image built successfully"
+
+      - name: Zero-Downtime Dev Deployment
+        run: |
+          echo "🚀 Starting zero-downtime dev deployment..."
+          
+          COMPOSE_FILE="docker-compose.staging.yml"
+          CONTAINER_NAME="portfolio-app-staging"
+          HEALTH_PORT="3002"
+          
+          # Backup current container ID if running
+          OLD_CONTAINER=$(docker ps -q -f name=$CONTAINER_NAME || echo "")
+          
+          # Start new container with updated image
+          echo "🆕 Starting new dev container..."
+          docker compose -f $COMPOSE_FILE up -d --no-deps --build portfolio-staging
+          
+          # Wait for new container to be healthy
+          echo "⏳ Waiting for new container to be healthy..."
+          for i in {1..60}; do
+            NEW_CONTAINER=$(docker ps -q -f name=$CONTAINER_NAME)
+            if [ ! -z "$NEW_CONTAINER" ]; then
+              # Check health status
+              HEALTH=$(docker inspect $NEW_CONTAINER --format='{{.State.Health.Status}}' 2>/dev/null || echo "starting")
+              if [ "$HEALTH" == "healthy" ]; then
+                echo "✅ New container is healthy!"
+                break
+              fi
+              # Also check HTTP health endpoint
+              if curl -f http://localhost:$HEALTH_PORT/api/health > /dev/null 2>&1; then
+                echo "✅ New container is responding!"
+                break
+              fi
+            fi
+            echo "⏳ Waiting... ($i/60)"
+            sleep 2
+          done
+          
+          # Verify new container is working
+          if ! curl -f http://localhost:$HEALTH_PORT/api/health > /dev/null 2>&1; then
+            echo "⚠️ New dev container health check failed, but continuing (non-blocking)..."
+            docker compose -f $COMPOSE_FILE logs --tail=50 portfolio-staging
+          fi
+          
+          # Remove old container if it exists and is different
+          if [ ! -z "$OLD_CONTAINER" ]; then
+            NEW_CONTAINER=$(docker ps -q -f name=$CONTAINER_NAME)
+            if [ "$OLD_CONTAINER" != "$NEW_CONTAINER" ]; then
+              echo "🧹 Removing old container..."
+              docker stop $OLD_CONTAINER 2>/dev/null || true
+              docker rm $OLD_CONTAINER 2>/dev/null || true
+            fi
+          fi
+          
+          echo "✅ Dev deployment completed!"
+        env:
+          NODE_ENV: staging
+          LOG_LEVEL: ${{ vars.LOG_LEVEL || 'debug' }}
+          NEXT_PUBLIC_BASE_URL: ${{ vars.NEXT_PUBLIC_BASE_URL || 'https://dev.dk0.dev' }}
+          MY_EMAIL: ${{ vars.MY_EMAIL }}
+          MY_INFO_EMAIL: ${{ vars.MY_INFO_EMAIL }}
+          MY_PASSWORD: ${{ secrets.MY_PASSWORD }}
+          MY_INFO_PASSWORD: ${{ secrets.MY_INFO_PASSWORD }}
+          ADMIN_BASIC_AUTH: ${{ secrets.ADMIN_BASIC_AUTH }}
+          N8N_WEBHOOK_URL: ${{ vars.N8N_WEBHOOK_URL || '' }}
+          N8N_SECRET_TOKEN: ${{ secrets.N8N_SECRET_TOKEN || '' }}
+
+      - name: Dev Health Check
+        run: |
+          echo "🔍 Running dev health checks..."
+          for i in {1..20}; do
+            if curl -f http://localhost:3002/api/health && curl -f http://localhost:3002/ > /dev/null; then
+              echo "✅ Dev is fully operational!"
+              exit 0
+            fi
+            echo "⏳ Waiting for dev... ($i/20)"
+            sleep 3
+          done
+          echo "⚠️ Dev health check failed, but continuing (non-blocking)..."
+          docker compose -f docker-compose.staging.yml logs --tail=50
+
+      - name: Cleanup
+        run: |
+          echo "🧹 Cleaning up old images..."
+          docker image prune -f
+          echo "✅ Cleanup completed"

.gitea/workflows/production-deploy.yml

@@ -0,0 +1,129 @@
+name: Production Deployment (Zero Downtime)
+
+on:
+  push:
+    branches: [ production ]
+
+env:
+  NODE_VERSION: '20'
+  DOCKER_IMAGE: portfolio-app
+  IMAGE_TAG: production
+
+jobs:
+  deploy-production:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run linting
+        run: npm run lint
+
+      - name: Run tests
+        run: npm run test:production
+
+      - name: Build application
+        run: npm run build
+
+      - name: Build Docker image
+        run: |
+          echo "🏗️ Building production Docker image..."
+          docker build -t ${{ env.DOCKER_IMAGE }}:${{ env.IMAGE_TAG }} .
+          docker tag ${{ env.DOCKER_IMAGE }}:${{ env.IMAGE_TAG }} ${{ env.DOCKER_IMAGE }}:latest
+          echo "✅ Docker image built successfully"
+
+      - name: Zero-Downtime Production Deployment
+        run: |
+          echo "🚀 Starting zero-downtime production deployment..."
+          
+          COMPOSE_FILE="docker-compose.production.yml"
+          CONTAINER_NAME="portfolio-app"
+          HEALTH_PORT="3000"
+          
+          # Backup current container ID if running
+          OLD_CONTAINER=$(docker ps -q -f name=$CONTAINER_NAME || echo "")
+          
+          # Start new container with updated image (docker-compose will handle this)
+          echo "🆕 Starting new production container..."
+          docker compose -f $COMPOSE_FILE up -d --no-deps --build portfolio
+          
+          # Wait for new container to be healthy
+          echo "⏳ Waiting for new container to be healthy..."
+          for i in {1..60}; do
+            NEW_CONTAINER=$(docker ps -q -f name=$CONTAINER_NAME)
+            if [ ! -z "$NEW_CONTAINER" ]; then
+              # Check health status
+              HEALTH=$(docker inspect $NEW_CONTAINER --format='{{.State.Health.Status}}' 2>/dev/null || echo "starting")
+              if [ "$HEALTH" == "healthy" ]; then
+                echo "✅ New container is healthy!"
+                break
+              fi
+              # Also check HTTP health endpoint
+              if curl -f http://localhost:$HEALTH_PORT/api/health > /dev/null 2>&1; then
+                echo "✅ New container is responding!"
+                break
+              fi
+            fi
+            echo "⏳ Waiting... ($i/60)"
+            sleep 2
+          done
+          
+          # Verify new container is working
+          if ! curl -f http://localhost:$HEALTH_PORT/api/health > /dev/null 2>&1; then
+            echo "❌ New container failed health check!"
+            docker compose -f $COMPOSE_FILE logs --tail=50 portfolio
+            exit 1
+          fi
+          
+          # Remove old container if it exists and is different
+          if [ ! -z "$OLD_CONTAINER" ]; then
+            NEW_CONTAINER=$(docker ps -q -f name=$CONTAINER_NAME)
+            if [ "$OLD_CONTAINER" != "$NEW_CONTAINER" ]; then
+              echo "🧹 Removing old container..."
+              docker stop $OLD_CONTAINER 2>/dev/null || true
+              docker rm $OLD_CONTAINER 2>/dev/null || true
+            fi
+          fi
+          
+          echo "✅ Production deployment completed with zero downtime!"
+        env:
+          NODE_ENV: production
+          LOG_LEVEL: ${{ vars.LOG_LEVEL || 'info' }}
+          NEXT_PUBLIC_BASE_URL: ${{ vars.NEXT_PUBLIC_BASE_URL || 'https://dk0.dev' }}
+          MY_EMAIL: ${{ vars.MY_EMAIL }}
+          MY_INFO_EMAIL: ${{ vars.MY_INFO_EMAIL }}
+          MY_PASSWORD: ${{ secrets.MY_PASSWORD }}
+          MY_INFO_PASSWORD: ${{ secrets.MY_INFO_PASSWORD }}
+          ADMIN_BASIC_AUTH: ${{ secrets.ADMIN_BASIC_AUTH }}
+          N8N_WEBHOOK_URL: ${{ vars.N8N_WEBHOOK_URL || '' }}
+          N8N_SECRET_TOKEN: ${{ secrets.N8N_SECRET_TOKEN || '' }}
+
+      - name: Production Health Check
+        run: |
+          echo "🔍 Running production health checks..."
+          for i in {1..20}; do
+            if curl -f http://localhost:3000/api/health && curl -f http://localhost:3000/ > /dev/null; then
+              echo "✅ Production is fully operational!"
+              exit 0
+            fi
+            echo "⏳ Waiting for production... ($i/20)"
+            sleep 3
+          done
+          echo "❌ Production health check failed!"
+          docker compose -f docker-compose.production.yml logs --tail=50
+          exit 1
+
+      - name: Cleanup
+        run: |
+          echo "🧹 Cleaning up old images..."
+          docker image prune -f
+          echo "✅ Cleanup completed"

.gitea/workflows/test-and-build.yml

@@ -1,41 +0,0 @@
-name: Test and Build
-
-on:
-  push:
-    branches: [ main ]
-  pull_request:
-    branches: [ main ]
-
-env:
-  NODE_VERSION: '20'
-
-jobs:
-  test-and-build:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-          cache: 'npm'
-          cache-dependency-path: 'package-lock.json'
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Run linting
-        run: npm run lint
-
-      - name: Run tests
-        run: npm run test
-
-      - name: Build application
-        run: npm run build
-
-      - name: Run security scan
-        run: |
-          echo "🔍 Running npm audit..."
-          npm audit --audit-level=high || echo "⚠️ Some vulnerabilities found, but continuing..."

.gitea/workflows/test-gitea-variables.yml

@@ -1,105 +0,0 @@
-name: Test Gitea Variables and Secrets
-
-on:
-  push:
-    branches: [ production ]
-  workflow_dispatch:
-
-jobs:
-  test-variables:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v3
-
-      - name: Test Variables and Secrets Access
-        run: |
-          echo "🔍 Testing Gitea Variables and Secrets access..."
-          
-          # Test Variables
-          echo "📝 Testing Variables:"
-          echo "NEXT_PUBLIC_BASE_URL: '${{ vars.NEXT_PUBLIC_BASE_URL }}'"
-          echo "MY_EMAIL: '${{ vars.MY_EMAIL }}'"
-          echo "MY_INFO_EMAIL: '${{ vars.MY_INFO_EMAIL }}'"
-          echo "NODE_ENV: '${{ vars.NODE_ENV }}'"
-          echo "LOG_LEVEL: '${{ vars.LOG_LEVEL }}'"
-          echo "NEXT_PUBLIC_UMAMI_URL: '${{ vars.NEXT_PUBLIC_UMAMI_URL }}'"
-          echo "NEXT_PUBLIC_UMAMI_WEBSITE_ID: '${{ vars.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}'"
-          
-          # Test Secrets (without revealing values)
-          echo ""
-          echo "🔐 Testing Secrets:"
-          echo "MY_PASSWORD: '$([ -n "${{ secrets.MY_PASSWORD }}" ] && echo "[SET]" || echo "[NOT SET]")'"
-          echo "MY_INFO_PASSWORD: '$([ -n "${{ secrets.MY_INFO_PASSWORD }}" ] && echo "[SET]" || echo "[NOT SET]")'"
-          echo "ADMIN_BASIC_AUTH: '$([ -n "${{ secrets.ADMIN_BASIC_AUTH }}" ] && echo "[SET]" || echo "[NOT SET]")'"
-          
-          # Check if variables are empty
-          echo ""
-          echo "🔍 Checking for empty variables:"
-          if [ -z "${{ vars.NEXT_PUBLIC_BASE_URL }}" ]; then
-            echo "❌ NEXT_PUBLIC_BASE_URL is empty or not set"
-          else
-            echo "✅ NEXT_PUBLIC_BASE_URL is set"
-          fi
-          
-          if [ -z "${{ vars.MY_EMAIL }}" ]; then
-            echo "❌ MY_EMAIL is empty or not set"
-          else
-            echo "✅ MY_EMAIL is set"
-          fi
-          
-          if [ -z "${{ vars.MY_INFO_EMAIL }}" ]; then
-            echo "❌ MY_INFO_EMAIL is empty or not set"
-          else
-            echo "✅ MY_INFO_EMAIL is set"
-          fi
-          
-          # Check secrets
-          if [ -z "${{ secrets.MY_PASSWORD }}" ]; then
-            echo "❌ MY_PASSWORD secret is empty or not set"
-          else
-            echo "✅ MY_PASSWORD secret is set"
-          fi
-          
-          if [ -z "${{ secrets.MY_INFO_PASSWORD }}" ]; then
-            echo "❌ MY_INFO_PASSWORD secret is empty or not set"
-          else
-            echo "✅ MY_INFO_PASSWORD secret is set"
-          fi
-          
-          if [ -z "${{ secrets.ADMIN_BASIC_AUTH }}" ]; then
-            echo "❌ ADMIN_BASIC_AUTH secret is empty or not set"
-          else
-            echo "✅ ADMIN_BASIC_AUTH secret is set"
-          fi
-          
-          echo ""
-          echo "📊 Summary:"
-          echo "Variables set: $(echo '${{ vars.NEXT_PUBLIC_BASE_URL }}' | wc -c)"
-          echo "Secrets set: $(echo '${{ secrets.MY_PASSWORD }}' | wc -c)"
-
-      - name: Test Environment Variable Export
-        run: |
-          echo "🧪 Testing environment variable export..."
-          
-          # Export variables as environment variables
-          export NODE_ENV="${{ vars.NODE_ENV }}"
-          export LOG_LEVEL="${{ vars.LOG_LEVEL }}"
-          export NEXT_PUBLIC_BASE_URL="${{ vars.NEXT_PUBLIC_BASE_URL }}"
-          export NEXT_PUBLIC_UMAMI_URL="${{ vars.NEXT_PUBLIC_UMAMI_URL }}"
-          export NEXT_PUBLIC_UMAMI_WEBSITE_ID="${{ vars.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}"
-          export MY_EMAIL="${{ vars.MY_EMAIL }}"
-          export MY_INFO_EMAIL="${{ vars.MY_INFO_EMAIL }}"
-          export MY_PASSWORD="${{ secrets.MY_PASSWORD }}"
-          export MY_INFO_PASSWORD="${{ secrets.MY_INFO_PASSWORD }}"
-          export ADMIN_BASIC_AUTH="${{ secrets.ADMIN_BASIC_AUTH }}"
-          
-          echo "📝 Exported environment variables:"
-          echo "NODE_ENV: ${NODE_ENV:-[NOT SET]}"
-          echo "LOG_LEVEL: ${LOG_LEVEL:-[NOT SET]}"
-          echo "NEXT_PUBLIC_BASE_URL: ${NEXT_PUBLIC_BASE_URL:-[NOT SET]}"
-          echo "MY_EMAIL: ${MY_EMAIL:-[NOT SET]}"
-          echo "MY_INFO_EMAIL: ${MY_INFO_EMAIL:-[NOT SET]}"
-          echo "MY_PASSWORD: $([ -n "${MY_PASSWORD}" ] && echo "[SET]" || echo "[NOT SET]")"
-          echo "MY_INFO_PASSWORD: $([ -n "${MY_INFO_PASSWORD}" ] && echo "[SET]" || echo "[NOT SET]")"
-          echo "ADMIN_BASIC_AUTH: $([ -n "${ADMIN_BASIC_AUTH}" ] && echo "[SET]" || echo "[NOT SET]")"