release.yml

name: Release and Deploy

on:
  push:
    tags:
      - "v*"
  workflow_dispatch:

env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true

jobs:
  deploy:
    runs-on: ubuntu-24.04
    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Set up deployment environment
        run: |
          echo "EC2_HOST=${{ secrets.PROD_EC2_HOST }}" >> $GITHUB_ENV
          echo "EC2_USER=${{ secrets.PROD_EC2_USER }}" >> $GITHUB_ENV
          {
            echo 'EC2_KEY<<EOF'
            echo "${{ secrets.PROD_EC2_KEY }}"
            echo 'EOF'
          } >> $GITHUB_ENV
          echo "ENV_NAME=production" >> $GITHUB_ENV

      - name: Create deployment package
        run: |
          mkdir deploy_package
          # include your deploy.sh and any other scripts here
          cp -r src public scripts package.json package-lock.json deploy_package/
          tar -czf deployment.tar.gz -C deploy_package .

      - name: Deploy to EC2
        run: |
          echo "- Deploying to $ENV_NAME environment..."
          echo "$EC2_KEY" > private_key.pem
          chmod 600 private_key.pem

          # copy tarball to EC2
          scp -o StrictHostKeyChecking=no -i private_key.pem deployment.tar.gz $EC2_USER@$EC2_HOST:/tmp/

          # Extract and run deploy.sh from /tmp so /var/www/app only contains release-managed files.
          ssh -o StrictHostKeyChecking=no -i private_key.pem $EC2_USER@$EC2_HOST "
            rm -rf /tmp/ec2-pipeline-deploy &&
            mkdir -p /tmp/ec2-pipeline-deploy /var/www/app &&
            tar -xzf /tmp/deployment.tar.gz -C /tmp/ec2-pipeline-deploy &&
            chmod +x /tmp/ec2-pipeline-deploy/scripts/deploy.sh &&
            /tmp/ec2-pipeline-deploy/scripts/deploy.sh
          "

  create-release:
    needs: deploy
    if: startsWith(github.ref, 'refs/tags/')
    runs-on: ubuntu-24.04
    permissions:
      contents: write
    steps:
      - name: Checkout code
        uses: actions/checkout@v6

      - name: Create GitHub Release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ github.ref_name }}
          name: Release ${{ github.ref_name }}
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}