wheels.dev/.github/workflows/swarm-deploy.yml at 981d433bc0329f7b396b527014c37edc0e2bdae2 · wheels-dev/wheels.dev · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
name: Deploy to Docker Swarm

on:
  push:
    branches:
      - main

env:
  IMAGE_NAME: ghcr.io/wheels-dev/wheels-dev
  REGISTRY: ghcr.io

jobs:
  build:
    name: Build & Push Image
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Generate .env from secrets
        env:
          RELOAD_PASSWORD: ${{ secrets.RELOAD_PASSWORD }}
          CFCONFIG_ADMIN_PASSWORD: ${{ secrets.CFCONFIG_ADMIN_PASSWORD }}
          WHEELSDEV_HOST: ${{ secrets.WHEELSDEV_HOST }}
          WHEELSDEV_PORT: ${{ secrets.WHEELSDEV_PORT }}
          WHEELSDEV_DATABASENAME: ${{ secrets.WHEELSDEV_DATABASENAME }}
          WHEELSDEV_USERNAME: ${{ secrets.WHEELSDEV_USERNAME }}
          WHEELSDEV_PASSWORD: ${{ secrets.WHEELSDEV_PASSWORD }}
          SMTP_USERNAME: ${{ secrets.SMTP_USERNAME }}
          SMTP_PASSWORD: ${{ secrets.SMTP_PASSWORD }}
          WHEELS_ID_SALT: ${{ secrets.WHEELS_ID_SALT }}
          SENTRY_DSN: ${{ secrets.SENTRY_DSN }}
        run: |
          cat > .env << ENVEOF
          LUCEE_EXTENSIONS=BEC20D47-3268-1B354-C0E8E70B5CBC15A1;name=PostgreSQL;version=42.7.4

          environment=production
          reloadPassword=${RELOAD_PASSWORD}

          cfconfig_adminPassword=${CFCONFIG_ADMIN_PASSWORD}

          application_host=https://wheels.dev
          datasource=wheels.dev

          wheelsdev_host=${WHEELSDEV_HOST}
          wheelsdev_port=${WHEELSDEV_PORT}
          wheelsdev_databasename=${WHEELSDEV_DATABASENAME}
          wheelsdev_username=${WHEELSDEV_USERNAME}
          wheelsdev_password=${WHEELSDEV_PASSWORD}
          wheelsdev_clob=true
          wheelsdev_connectionlimit=100
          wheelsdev_storage=true

          wheelsdev_storage=true
          sessionStorage=wheels.dev
          sessionCluster=true

          test_case=false
          mail_from=noreply@wheels.dev

          smtp_host=smtp.postmarkapp.com
          smtp_port=587
          smtp_username=${SMTP_USERNAME}
          smtp_password=${SMTP_PASSWORD}
          smtp_ssl=false
          smtp_tls=true

          wheels_id_salt=${WHEELS_ID_SALT}

          SENTRY_DSN=${SENTRY_DSN}
          SENTRY_ENVIRONMENT=production
          ENVEOF
          sed -i 's/^          //' .env

      - name: Copy swarm Dockerfile to root
        run: |
          cp ./deploy/swarm/dockerfile ./

      - name: Install CommandBox
        uses: Ortus-Solutions/setup-commandbox@v2.0.1
        with:
          forgeboxAPIKey: ${{ secrets.FORGEBOX_API_KEY }}

      - name: Install wheels-cli and dependencies
        run: |
          box install wheels-cli
          box install

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push Docker image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./dockerfile
          push: true
          tags: |
            ${{ env.IMAGE_NAME }}:latest
            ${{ env.IMAGE_NAME }}:${{ github.sha }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

  deploy:
    name: Deploy to Swarm
    runs-on: [self-hosted, Linux, swarm]
    needs: build

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Login to GHCR
        env:
          GHCR_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          GH_ACTOR: ${{ github.actor }}
        run: |
          echo "$GHCR_TOKEN" | docker login ghcr.io -u "$GH_ACTOR" --password-stdin

      - name: Deploy stack to swarm
        run: |
          docker stack deploy \
            --with-registry-auth \
            -c deploy/swarm/docker-compose.yml \
            wheels-dev
          # Force service update to pull the new :latest image on all nodes
          docker service update \
            --with-registry-auth \
            --image ghcr.io/wheels-dev/wheels-dev:latest \
            --force \
            wheels-dev_wheels-dev

      - name: Verify deployment
        run: |
          echo "Waiting for services to stabilize..."
          sleep 30
          docker service ls
          echo ""
          echo "Checking wheels-dev service replicas..."
          docker service ps wheels-dev_wheels-dev --no-trunc