deploy.yml

# .github/workflows/deploy.yml
name: Deploy cardano-payroll

on:
  push:
    branches:
      - master

jobs:
  deploy:
    name: Build and Deploy
    runs-on: [self-hosted, Linux, payroll-dev]
    timeout-minutes: 30

    steps:
      # STEP 1: Checkout the repository
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      # STEP 2: Create .env at root from secrets & variables
      - name: Create .env file
        run: |
          cat > ./.env << EOF
          POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }}
          SPRING_DATASOURCE_PASSWORD=${{ secrets.SPRING_DATASOURCE_PASSWORD }}
          COMPANY_SKEY=${{ secrets.COMPANY_SKEY }}
          KUBER_API_KEY=${{ secrets.KUBER_API_KEY }}
          BLOCKFROST_PROJECT_ID=${{ secrets.BLOCKFROST_PROJECT_ID }}
          NETWORK=${{ vars.NETWORK }}
          COMPANY_WALLET_ADDRESS=${{ vars.COMPANY_WALLET_ADDRESS }}
          KUBER_API_URL=${{ vars.KUBER_API_URL }}
          BLOCKFROST_BASE_URL=${{ vars.BLOCKFROST_BASE_URL }}
          BATCH_SCRIPT_PATH=/app/scripts/send-ada.js
          BATCH_WALLET_PATH=/app/scripts/send-wallet-ada.js
          BATCH_BUILD_WALLET_PATH=/app/scripts/build-wallet-ada.js
          NEXT_PUBLIC_API_BASE_URL=${{ vars.NEXT_PUBLIC_API_BASE_URL }}
          NEXT_PUBLIC_CARDANO_NETWORK=${{ vars.NETWORK }}
          EOF

      # STEP 3: Stop existing Docker containers (if any)
      - name: Stop existing containers
        run: docker compose down --remove-orphans
        continue-on-error: true

      # STEP 4: Pull latest base images
      - name: Pull latest base images
        run: docker compose pull
        continue-on-error: true

      # STEP 5: Build Docker images
      - name: Build Docker images
        run: docker compose build --no-cache

      # STEP 6: Start services
      - name: Start Docker services
        run: docker compose up -d

      # STEP 7: Wait for services to be healthy
      - name: Wait for services to start
        run: sleep 20

      - name: Health check backend
        run: |
          for i in {1..10}; do
            if curl -sf http://localhost:8080/actuator/health; then
              echo "Backend is healthy"
              exit 0
            fi
            echo "Attempt $i failed, retrying in 5s..."
            sleep 5
          done
          echo "Backend health check failed!"
          docker compose logs backend
          exit 1

      - name: Health check frontend
        run: |
          for i in {1..10}; do
            if curl -sf http://localhost:3000; then
              echo "Frontend is healthy"
              exit 0
            fi
            echo "Attempt $i failed, retrying in 5s..."
            sleep 5
          done
          echo "Frontend health check failed!"
          docker compose logs frontend
          exit 1

      # STEP 8: Cleanup unused Docker images
      - name: Clean up unused Docker images
        run: docker image prune -f
        continue-on-error: true

      # STEP 10: Rollback on failure (logs only)
      - name: Rollback on failure
        if: failure()
        run: |
          echo "Deployment failed! Check logs above."
          docker compose logs --tail=50