Merge pull request #122 from httptoolkit/dependabot/npm_and_yarn/api/… #542
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: push | |
| jobs: | |
| build-module: | |
| name: Build & test npm module | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: module | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| - run: npm install | |
| # Just check the code compiles | |
| - run: npm run build | |
| build-api: | |
| name: Build & test API | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: api | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| - run: npm ci | |
| - run: npm test | |
| build-dashboard: | |
| name: Build & test dashboard | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: 20 | |
| - name: Dashboard NPM CI | |
| run: npm ci | |
| working-directory: ui | |
| - run: npm run build:ui | |
| env: | |
| ACCOUNTS_API: '/api' # UI always uses the matching-origin API | |
| VERSION: ${{ github.sha }} | |
| NODE_ENV: production | |
| SENTRY_DSN: ${{ secrets.SENTRY_DSN }} | |
| - uses: actions/upload-artifact@v4 | |
| with: | |
| name: dashboard-dist | |
| path: dist/* | |
| if-no-files-found: error | |
| build-completed: | |
| name: Build completed | |
| runs-on: ubuntu-latest | |
| needs: | |
| - build-module | |
| - build-api | |
| - build-dashboard | |
| steps: | |
| - run: echo 'Build completed' | |
| deploy-api: | |
| name: Deploy API to production | |
| if: github.event_name == 'push' && github.ref == 'refs/heads/main' | |
| environment: production | |
| needs: build-completed | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: docker/setup-buildx-action@v3 | |
| - name: Login to DockerHub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Login to Scaleway Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: rg.nl-ams.scw.cloud/httptoolkit | |
| username: nologin | |
| password: ${{ secrets.SCW_REGISTRY_KEY }} | |
| - name: Extract Docker metadata | |
| id: meta | |
| uses: docker/metadata-action@v5 | |
| with: | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| images: | | |
| httptoolkit/accounts-api | |
| rg.nl-ams.scw.cloud/httptoolkit/accounts-api | |
| tags: | | |
| type=raw,value=prod,enable={{is_default_branch}} | |
| type=raw,value=latest,enable={{is_default_branch}} | |
| type=sha | |
| - name: Build & publish API image to registries | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: api/ | |
| push: ${{ github.event_name != 'pull_request' }} | |
| tags: ${{ steps.meta.outputs.tags }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| build-args: VERSION=${{ github.sha }} | |
| - name: Redeploy container | |
| uses: httptoolkit/scaleway-serverless-container-deploy-action@v1 | |
| with: | |
| container_id: ${{ vars.SCW_API_CONTAINER_ID }} | |
| region: ${{ vars.SCW_API_CONTAINER_REGION }} | |
| secret_key: ${{ secrets.SCW_SECRET_KEY }} | |
| registry_image_url: "registry.hub.docker.com/httptoolkit/accounts-api:prod" | |
| - name: Redeploy failover container | |
| uses: httptoolkit/scaleway-serverless-container-deploy-action@v1 | |
| with: | |
| container_id: ${{ vars.SCW_FAILOVER_API_CONTAINER_ID }} | |
| region: ${{ vars.SCW_FAILOVER_API_CONTAINER_REGION }} | |
| secret_key: ${{ secrets.SCW_SECRET_KEY }} | |
| registry_image_url: "registry.hub.docker.com/httptoolkit/accounts-api:prod" | |
| deploy-dashboard: | |
| name: Deploy Dashboard to production | |
| if: github.event_name == 'push' && github.ref == 'refs/heads/main' | |
| environment: production | |
| needs: build-completed | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/download-artifact@v4 | |
| with: | |
| name: dashboard-dist | |
| path: dashboard-dist | |
| - name: Publish to Bunny.net FTP | |
| uses: SamKirkland/[email protected] | |
| with: | |
| local-dir: ./dashboard-dist/ | |
| server-dir: /${{ vars.FTP_USERNAME }}/ | |
| protocol: ftps | |
| log-level: verbose | |
| server: ${{ vars.FTP_HOSTNAME }} | |
| username: ${{ vars.FTP_USERNAME }} | |
| password: ${{ secrets.FTP_PASSWORD }} | |
| timeout: 60000 | |
| post-deploy: | |
| name: Update CDN after deploy | |
| environment: production | |
| needs: | |
| - deploy-api | |
| - deploy-dashboard | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Flush CDN cache | |
| run: | | |
| # Clear CDN cache to re-request content: | |
| curl -f --request POST \ | |
| --url https://api.bunny.net/pullzone/$BUNNY_PULL_ZONE_ID/purgeCache \ | |
| --header "AccessKey: $BUNNY_SITE_API_KEY" | |
| env: | |
| BUNNY_PULL_ZONE_ID: ${{ vars.BUNNY_PULL_ZONE_ID }} | |
| BUNNY_SITE_API_KEY: ${{ secrets.BUNNY_SITE_API_KEY }} |