feat(sharing-server): add deployment footer with SHA, branch, and build date

rajbos · Copilot · rajbos · commit c35458f75cdd · 2026-04-29T21:15:57.000+02:00
- Inject DEPLOY_SHA, DEPLOY_BRANCH, DEPLOY_DATE as Docker build args into
  the runtime stage ENV so the running container knows its own version
- Add a subtle footer to every page in the layout() function showing:
  deployed from &lt;branch&gt; · &lt;short sha&gt; · &lt;build date&gt;
- Expose version info in the /health endpoint (no login required)
- Pass build-args in the deploy workflow (sha, branch, build date)

Co-authored-by: Copilot &lt;223556219+Copilot@users.noreply.github.com&gt;
diff --git a/.github/workflows/sharing-server-deploy.yml b/.github/workflows/sharing-server-deploy.yml
@@ -114,6 +114,11 @@ jobs:
             type=sha,prefix=sha-,format=long
             type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
 
+      - name: Set build metadata
+        id: build-meta
+        run: |
+          echo "date=$(date -u +'%Y-%m-%d %H:%M UTC')" >> "$GITHUB_OUTPUT"
+
       - name: Build and push
         id: build
         uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
@@ -124,6 +129,10 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
+          build-args: |
+            DEPLOY_SHA=${{ github.sha }}
+            DEPLOY_BRANCH=${{ github.ref_name }}
+            DEPLOY_DATE=${{ steps.build-meta.outputs.date }}
 
       - name: Set image output (digest-pinned reference)
         id: image-ref
diff --git a/sharing-server/Dockerfile b/sharing-server/Dockerfile
@@ -30,9 +30,16 @@ VOLUME ["/data"]
 
 EXPOSE 3000
 
+ARG DEPLOY_SHA=unknown
+ARG DEPLOY_BRANCH=unknown
+ARG DEPLOY_DATE=unknown
+
 ENV NODE_ENV=production \
     DATA_DIR=/data \
-    PORT=3000
+    PORT=3000 \
+    DEPLOY_SHA=$DEPLOY_SHA \
+    DEPLOY_BRANCH=$DEPLOY_BRANCH \
+    DEPLOY_DATE=$DEPLOY_DATE
 
 # Use tini as PID 1 for proper signal handling
 ENTRYPOINT ["tini", "--"]
diff --git a/sharing-server/src/routes/dashboard.ts b/sharing-server/src/routes/dashboard.ts
@@ -17,6 +17,10 @@ const GITHUB_CLIENT_ID = process.env.GITHUB_CLIENT_ID ?? '';
 const GITHUB_CLIENT_SECRET = process.env.GITHUB_CLIENT_SECRET ?? '';
 const BASE_URL = (process.env.BASE_URL ?? 'http://localhost:3000').replace(/\/$/, '');
 
+const DEPLOY_SHA    = process.env.DEPLOY_SHA    ?? 'unknown';
+const DEPLOY_BRANCH = process.env.DEPLOY_BRANCH ?? 'unknown';
+const DEPLOY_DATE   = process.env.DEPLOY_DATE   ?? 'unknown';
+
 // Load Chart.js UMD bundle once at startup — copied to dist/ by esbuild.js
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const _chartJsCode: string = (() => {
@@ -403,10 +407,18 @@ function layout(title: string, body: string): string {
   .btn-secondary { background: #21262d; color: #c9d1d9; border: 1px solid #30363d; }
   .btn-secondary:hover { background: #30363d; }
   code { background: #21262d; border-radius: 4px; padding: 1px 5px; font-size: 0.875em; }
+
+  /* ── Footer ── */
+  .deploy-footer { text-align: center; padding: 20px; margin-top: 8px;
+    color: #484f58; font-size: 0.75rem; border-top: 1px solid #21262d; }
+  .deploy-footer code { background: transparent; color: #484f58; padding: 0; font-size: 0.75em; }
 </style>
 </head>
 <body>
 ${body}
+<footer class="deploy-footer">
+  deployed from <code>${h(DEPLOY_BRANCH)}</code> &middot; <code>${h(DEPLOY_SHA)}</code> &middot; ${h(DEPLOY_DATE)}
+</footer>
 </body>
 </html>`;
 }
diff --git a/sharing-server/src/server.ts b/sharing-server/src/server.ts
@@ -7,7 +7,15 @@ import { getDb, closeDb, restoreFromBackup, backupToAzureFiles, syncAdminLogins
 const app = new Hono();
 
 // Health check — no auth required
-app.get('/health', (c) => c.json({ status: 'ok', timestamp: new Date().toISOString() }));
+app.get('/health', (c) => c.json({
+	status: 'ok',
+	timestamp: new Date().toISOString(),
+	version: {
+		sha:    process.env.DEPLOY_SHA    ?? 'unknown',
+		branch: process.env.DEPLOY_BRANCH ?? 'unknown',
+		date:   process.env.DEPLOY_DATE   ?? 'unknown',
+	},
+}));
 
 // API routes (Bearer GitHub token auth)
 app.route('/api', api);
