Create deployment path #44
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Infrastructure CI and CD | |
| on: | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - .github/** | |
| - infrastructure/** | |
| pull_request: | |
| paths: | |
| - .github/** | |
| - infrastructure/** | |
| defaults: | |
| run: | |
| working-directory: ./infrastructure | |
| env: | |
| TF_VAR_project_name: tarhche | |
| TF_VAR_instance_name: backend | |
| EC2_SSH_ADDRESS: ${{ secrets.EC2_SSH_ADDRESS }} | |
| EC2_SSH_ENDPOINT: ${{ secrets.EC2_SSH_USER }}@${{ secrets.EC2_SSH_ADDRESS }} | |
| jobs: | |
| ci: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Set up AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: ${{ secrets.AWS_REGION }} | |
| - name: Setup Terraform | |
| uses: hashicorp/setup-terraform@v3 | |
| - name: Terraform Format | |
| id: fmt | |
| run: terraform fmt -check | |
| - name: Terraform Init | |
| id: init | |
| run: terraform init | |
| - name: Terraform Validate | |
| id: validate | |
| run: terraform validate -no-color | |
| - name: Terraform Plan | |
| run: terraform plan -no-color -input=false | |
| continue-on-error: false | |
| cd: | |
| runs-on: ubuntu-latest | |
| # This job will be invoked only on default branch | |
| # if: ${{ always() && format('refs/heads/{0}', github.event.repository.default_branch) == github.ref }} | |
| needs: | |
| - ci | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Set up AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v1 | |
| with: | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| aws-region: ${{ secrets.AWS_REGION }} | |
| - name: Setup Terraform | |
| uses: hashicorp/setup-terraform@v3 | |
| - name: Terraform Init | |
| id: init | |
| run: terraform init | |
| - name: Terraform Validate | |
| id: validate | |
| run: terraform validate -no-color | |
| - name: Terraform Apply | |
| run: terraform apply -auto-approve -input=false | |
| continue-on-error: false | |
| - name: Deploy services | |
| run: | | |
| # setup ssh key | |
| echo "${{ secrets.EC2_SSH_PRIVATE_KEY }}" > ~/ec2-key.pem | |
| chmod 400 ~/ec2-key.pem | |
| mkdir -p ~/.ssh | |
| ssh-keyscan -H $EC2_SSH_ADDRESS >> ~/.ssh/known_hosts | |
| # Ensure remote directory exists | |
| ssh -i ~/ec2-key.pem -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null $EC2_SSH_ENDPOINT << 'EOF' | |
| sudo mkdir -p /opt/deployment | |
| sudo chown ${{ secrets.EC2_SSH_USER }}:${{ secrets.EC2_SSH_USER }} /opt/deployment | |
| EOF | |
| # copy files | |
| scp -i ~/ec2-key.pem -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -r ./* $EC2_SSH_ENDPOINT:/opt/deployment/ | |
| # connect and deploy services | |
| ssh -i ~/ec2-key.pem -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null $EC2_SSH_ENDPOINT << 'EOF' | |
| export VOLUME_PATH="${{ secrets.VOLUME_PATH }}" | |
| export MONGO_USERNAME="${{ secrets.MONGO_USERNAME }}" | |
| export MONGO_PASSWORD="${{ secrets.MONGO_PASSWORD }}" | |
| export DASHBOARD_MONGO_USERNAME="${{ secrets.DASHBOARD_MONGO_USERNAME }}" | |
| export DASHBOARD_MONGO_PASSWORD="${{ secrets.DASHBOARD_MONGO_PASSWORD }}" | |
| export DASHBOARD_MONGO_MONGODB_URL="mongodb://${{ secrets.MONGO_USERNAME }}:${{ secrets.MONGO_PASSWORD }}@mongodb:27017" | |
| export BACKEND_NATS_URL="${{ secrets.BACKEND_NATS_URL }}" | |
| export BACKEND_PRIVATE_KEY="${{ secrets.BACKEND_PRIVATE_KEY }}" | |
| export BACKEND_MONGO_HOST="mongodb" | |
| export BACKEND_MONGO_PORT="27017" | |
| export BACKEND_MONGO_SCHEME="mongodb" | |
| export BACKEND_MONGO_DATABASE_NAME="${{ secrets.BACKEND_MONGO_DATABASE_NAME }}" | |
| export BACKEND_MONGO_USERNAME="${{ secrets.MONGO_USERNAME }}" | |
| export BACKEND_MONGO_PASSWORD="${{ secrets.MONGO_PASSWORD }}" | |
| export BACKEND_MAIL_SMTP_PASSWORD="${{ secrets.BACKEND_MAIL_SMTP_PASSWORD }}" | |
| export BACKEND_MAIL_SMTP_HOST="${{ secrets.BACKEND_MAIL_SMTP_HOST }}" | |
| export BACKEND_MAIL_SMTP_FROM="${{ secrets.BACKEND_MAIL_SMTP_FROM }}" | |
| export BACKEND_MAIL_SMTP_USERNAME="${{ secrets.BACKEND_MAIL_SMTP_USERNAME }}" | |
| export BACKEND_MAIL_SMTP_PORT="${{ secrets.BACKEND_MAIL_SMTP_PORT }}" | |
| export BACKEND_S3_ENDPOINT="${{ secrets.BACKEND_S3_ENDPOINT }}" | |
| export BACKEND_S3_SECRET_KEY="${{ secrets.BACKEND_S3_SECRET_KEY }}" | |
| export BACKEND_S3_ACCESS_KEY="${{ secrets.BACKEND_S3_ACCESS_KEY }}" | |
| export BACKEND_S3_USE_SSL="${{ secrets.BACKEND_S3_USE_SSL }}" | |
| export BACKEND_S3_BUCKET_NAME="${{ secrets.BACKEND_S3_BUCKET_NAME }}" | |
| export APP_IMAGE="${{ secrets.APP_IMAGE }}" | |
| export PORTAINER_ADMIN_PASSWORD="${{ secrets.PORTAINER_ADMIN_PASSWORD }}" | |
| export FRONTEND_IMAGE="${{ secrets.FRONTEND_IMAGE }}" | |
| export NEXT_PUBLIC_EXTERNAL_BACKEND_BASE_URL="${{ secrets.NEXT_PUBLIC_EXTERNAL_BACKEND_BASE_URL }}" | |
| export INTERNAL_BACKEND_BASE_URL="${{ secrets.INTERNAL_BACKEND_BASE_URL }}" | |
| export NEXT_PUBLIC_FILES_BASE_URL="${{ secrets.NEXT_PUBLIC_FILES_BASE_URL }}" | |
| # Run Docker Compose | |
| cd /opt/deployment/ | |
| docker compose \ | |
| -f compose.mongodb.yaml \ | |
| -f compose.nats.yaml \ | |
| -f compose.docker.yaml \ | |
| -f compose.backend.yaml \ | |
| -f compose.frontend.yaml \ | |
| -f compose.proxy.yaml \ | |
| up -d | |
| EOF |