feat: Add CI/CD pipeline with Gitea Actions

- ci.yaml: Backend build+test, Frontend type-check+build, Security scan - deploy.yaml: Manual deploy with health check + smoke test - Deploy supports per-service deploy and --no-cache option
2026-06-09 16:43:43 +02:00
parent 82cf226b83
commit ca86c4c310
3 changed files with 150 additions and 1442 deletions
@@ -0,0 +1,77 @@
+name: Deploy to Production
+run-name: 🚀 Deploy by @${{ gitea.actor }}
+
+on:
+  workflow_dispatch:
+    inputs:
+      service:
+        description: 'Service to deploy (empty = all)'
+        required: false
+        default: ''
+        type: string
+      no_cache:
+        description: 'Disable build cache'
+        required: false
+        default: false
+        type: boolean
+
+jobs:
+  deploy:
+    name: Deploy Nexus
+    runs-on: deploy  # only on runners with 'deploy' label
+    steps:
+      - name: Checkout latest code
+        uses: actions/checkout@v3
+
+      - name: Sync to deploy path
+        run: |
+          rsync -a --delete \
+            --exclude='.git' \
+            --exclude='.env' \
+            --exclude='backend-tests/bin' \
+            --exclude='backend-tests/obj' \
+            --exclude='backend/bin' \
+            --exclude='backend/obj' \
+            --exclude='frontend/dist' \
+            --exclude='frontend/node_modules' \
+            ${{ gitea.workspace }}/ /workspace/nexus/
+
+      - name: Set up Docker Buildx
+        run: docker buildx create --use 2>/dev/null || true
+
+      - name: Build & Deploy
+        working-directory: /workspace/nexus
+        run: |
+          BUILD_ARGS=""
+          if [ "${{ inputs.no_cache }}" = "true" ]; then
+            BUILD_ARGS="--no-cache"
+          fi
+          
+          if [ -n "${{ inputs.service }}" ]; then
+            echo "🚀 Deploying service: ${{ inputs.service }}"
+            docker compose build $BUILD_ARGS ${{ inputs.service }}
+            docker compose up -d --force-recreate ${{ inputs.service }}
+          else
+            echo "🚀 Deploying all services"
+            docker compose build $BUILD_ARGS
+            docker compose up -d --force-recreate
+          fi
+
+      - name: Health Check
+        run: |
+          sleep 5
+          echo "🏥 Health check..."
+          curl -sf --max-time 10 https://nexus.noveria.net/health || echo "⚠️ Health check failed"
+          echo ""
+          docker compose -f /workspace/nexus/compose.yaml ps
+
+      - name: Verify (smoke test)
+        run: |
+          echo "🔍 Smoke test..."
+          HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" https://nexus.noveria.net/dashboard)
+          echo "Dashboard: HTTP $HTTP_CODE"
+          if [ "$HTTP_CODE" != "200" ]; then
+            echo "❌ Dashboard not reachable!"
+            exit 1
+          fi
+          echo "✅ Deployment verified"