portfolio/.gitea/workflows/ci.yml

name: CI / CD

on:
  push:
    branches: [main, dev, production]
  pull_request:
    branches: [main, dev, production]

env:
  NODE_VERSION: '25'
  DOCKER_IMAGE: portfolio-app

jobs:
  # ── Job 1: Lint, Test, Build (runs on every push/PR) ──
  test-build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Lint
        run: npm run lint

      - name: Test
        run: npm run test

      - name: Build
        run: npm run build

  # ── Job 2: Deploy to dev (only on dev branch, after tests pass) ──
  deploy-dev:
    needs: test-build
    if: github.ref == 'refs/heads/dev' && github.event_name == 'push'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Build Docker image
        run: |
          echo "🏗️ Building dev Docker image..."
          DOCKER_BUILDKIT=1 docker build \
            --cache-from ${{ env.DOCKER_IMAGE }}:dev \
            --cache-from ${{ env.DOCKER_IMAGE }}:latest \
            -t ${{ env.DOCKER_IMAGE }}:dev \
            .
          echo "✅ Docker image built successfully"

      - name: Deploy dev container
        run: |
          echo "🚀 Starting dev deployment..."

          CONTAINER_NAME="portfolio-app-dev"
          HEALTH_PORT="3001"
          IMAGE_NAME="${{ env.DOCKER_IMAGE }}:dev"

          # Check for existing container
          EXISTING_CONTAINER=$(docker ps -aq -f name=$CONTAINER_NAME || echo "")

          # Ensure networks exist
          echo "🌐 Ensuring networks exist..."
          docker network create portfolio_net 2>/dev/null || true
          docker network create proxy 2>/dev/null || true

          # Verify production DB is reachable
          if docker exec portfolio-postgres pg_isready -U portfolio_user -d portfolio_db >/dev/null 2>&1; then
            echo "✅ Production database is ready!"
          else
            echo "⚠️ Production database not reachable, app will use fallbacks"
          fi

          # Stop and remove existing container
          if [ ! -z "$EXISTING_CONTAINER" ]; then
            echo "🛑 Stopping existing container..."
            docker stop $EXISTING_CONTAINER 2>/dev/null || true
            docker rm $EXISTING_CONTAINER 2>/dev/null || true
            sleep 3
          fi

          # Ensure port is free
          PORT_CONTAINER=$(docker ps -a --format "{{.ID}}\t{{.Ports}}" | grep -E "(:${HEALTH_PORT}->)" | awk '{print $1}' | head -1 || echo "")
          if [ ! -z "$PORT_CONTAINER" ]; then
            echo "⚠️ Port ${HEALTH_PORT} still in use, freeing..."
            docker stop $PORT_CONTAINER 2>/dev/null || true
            docker rm $PORT_CONTAINER 2>/dev/null || true
            sleep 3
          fi

          # Start new container
          echo "🆕 Starting new dev container..."
          docker run -d \
            --name $CONTAINER_NAME \
            --restart unless-stopped \
            --network portfolio_net \
            -p ${HEALTH_PORT}:3000 \
            -e NODE_ENV=production \
            -e LOG_LEVEL=${LOG_LEVEL:-debug} \
            -e NEXT_PUBLIC_BASE_URL=${NEXT_PUBLIC_BASE_URL_DEV:-https://dev.dk0.dev} \
            -e DATABASE_URL="${DATABASE_URL}" \
            -e REDIS_URL="${REDIS_URL}" \
            -e MY_EMAIL="${MY_EMAIL}" \
            -e MY_INFO_EMAIL="${MY_INFO_EMAIL}" \
            -e MY_PASSWORD="${MY_PASSWORD}" \
            -e MY_INFO_PASSWORD="${MY_INFO_PASSWORD}" \
            -e ADMIN_BASIC_AUTH="${ADMIN_BASIC_AUTH}" \
            -e ADMIN_SESSION_SECRET="${ADMIN_SESSION_SECRET}" \
            -e N8N_WEBHOOK_URL="${N8N_WEBHOOK_URL}" \
            -e N8N_SECRET_TOKEN="${N8N_SECRET_TOKEN}" \
            $IMAGE_NAME

          # Connect to proxy network
          docker network connect proxy $CONTAINER_NAME 2>/dev/null || true

          # Wait for health
          echo "⏳ Waiting for container to be healthy..."
          for i in {1..60}; do
            if curl -f -s http://localhost:$HEALTH_PORT/api/health > /dev/null 2>&1; then
              echo "✅ Dev container is healthy!"
              break
            fi
            HEALTH=$(docker inspect $CONTAINER_NAME --format='{{.State.Health.Status}}' 2>/dev/null || echo "starting")
            if [ "$HEALTH" == "healthy" ]; then
              echo "✅ Docker health check passed!"
              break
            fi
            if [ $i -eq 60 ]; then
              echo "⚠️ Health check timed out, showing logs:"
              docker logs $CONTAINER_NAME --tail=30
            fi
            sleep 2
          done

          echo "✅ Dev deployment completed!"
        env:
          LOG_LEVEL: ${{ vars.LOG_LEVEL || 'debug' }}
          NEXT_PUBLIC_BASE_URL_DEV: ${{ vars.NEXT_PUBLIC_BASE_URL_DEV || 'https://dev.dk0.dev' }}
          DATABASE_URL: postgresql://portfolio_user:portfolio_pass@portfolio-postgres:5432/portfolio_db?schema=public
          REDIS_URL: redis://portfolio-redis:6379
          MY_EMAIL: ${{ vars.MY_EMAIL }}
          MY_INFO_EMAIL: ${{ vars.MY_INFO_EMAIL }}
          MY_PASSWORD: ${{ secrets.MY_PASSWORD }}
          MY_INFO_PASSWORD: ${{ secrets.MY_INFO_PASSWORD }}
          ADMIN_BASIC_AUTH: ${{ secrets.ADMIN_BASIC_AUTH }}
          ADMIN_SESSION_SECRET: ${{ secrets.ADMIN_SESSION_SECRET }}
          N8N_WEBHOOK_URL: ${{ vars.N8N_WEBHOOK_URL || '' }}
          N8N_SECRET_TOKEN: ${{ secrets.N8N_SECRET_TOKEN || '' }}

      - name: Cleanup
        run: docker image prune -f