BitMatch/.github/workflows/deployment.yml at main · CPP-BitByBit/BitMatch · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
name: CI/CD Pipeline

on:
  push:
    branches:
      - "*"
  pull_request:
    branches:
      - main

jobs:
  terraform:
    runs-on: ubuntu-latest
    env:
      TF_AWS_ACCESS_KEY_ID: ${{ secrets.TF_AWS_ACCESS_KEY_ID }}
      TF_AWS_SECRET_ACCESS_KEY: ${{ secrets.TF_AWS_SECRET_ACCESS_KEY }}
      DB_USER_PROD: ${{ secrets.DB_USER_PROD }}
      DB_PASSWORD: ${{ secrets.DB_PASSWORD }}

    steps:
      - name: Checkout repository
        uses: actions/checkout@v2

      - name: Configure AWS CLI
        run: |
          aws configure set aws_access_key_id ${{ secrets.TF_AWS_ACCESS_KEY_ID }}
          aws configure set aws_secret_access_key ${{ secrets.TF_AWS_SECRET_ACCESS_KEY }}
          aws configure set region us-west-1

      - name: Set up Terraform
        uses: hashicorp/setup-terraform@v1
        with:
          terraform_version: 1.3.0

      - name: Terraform Init
        run: terraform -chdir=infra init

      - name: Terraform Destroy (Free Tier Expired, So Wiping For Now)
        run: terraform -chdir=infra destroy -auto-approve -var="db_username=${{ secrets.DB_USER_PROD }}" -var="db_password=${{ secrets.DB_PASSWORD }}"

      # - name: Terraform Plan
      #   if: github.event_name == 'pull_request'
      #   run: terraform -chdir=infra plan -var="db_username=${{ secrets.DB_USER_PROD }}" -var="db_password=${{ secrets.DB_PASSWORD }}"

      # - name: Terraform Apply (for push to main)
      #   if: github.event_name == 'push' && github.ref == 'refs/heads/main'
      #   run: terraform -chdir=infra apply -auto-approve -var="db_username=${{ secrets.DB_USER_PROD }}" -var="db_password=${{ secrets.DB_PASSWORD }}"

  # backend_deploy:
  #   runs-on: ubuntu-latest
  #   needs: terraform
  #   if: github.event_name == 'push' && github.ref == 'refs/heads/main'

  #   steps:
  #     - name: Checkout code
  #       uses: actions/checkout@v2

  #     - name: Set up Docker Buildx
  #       uses: docker/setup-buildx-action@v2

  #     - name: Log in to Docker Hub
  #       uses: docker/login-action@v2
  #       with:
  #         username: ${{ secrets.DOCKERHUB_USERNAME }}
  #         password: ${{ secrets.DOCKERHUB_TOKEN }}

  #     - name: Build and push Docker image
  #       run: |
  #         docker build -t lqla/bitmatch-backend:latest ./backend
  #         docker push lqla/bitmatch-backend:latest

  #     - name: Set up SSH and SSH into EC2
  #       uses: appleboy/ssh-action@v0.1.9
  #       with:
  #         host: ${{ secrets.EC2_IP }}
  #         username: ec2-user
  #         key: ${{ secrets.EC2_SSH_PRIVATE_KEY_PEM }}
  #         script: |
  #           docker pull lqla/bitmatch-backend:latest

  #           if [ "$(docker ps -q)" ]; then
  #           docker stop $(docker ps -q)
  #           docker rm $(docker ps -aq)
  #           fi

  #           docker image prune -a -f
  #           docker run -d -p 8000:8000 --env-file .env --name bitmatch-backend lqla/bitmatch-backend:latest

  # frontend_deploy:
  #   runs-on: ubuntu-latest
  #   needs: backend_deploy
  #   if: github.event_name == 'push' && github.ref == 'refs/heads/main'
  #   env:
  #     AWS_ACCESS_KEY_ID: ${{ secrets.TF_AWS_ACCESS_KEY_ID }}
  #     AWS_SECRET_ACCESS_KEY: ${{ secrets.TF_AWS_SECRET_ACCESS_KEY }}

  #   steps:
  #     - name: Checkout code
  #       uses: actions/checkout@v2

  #     - name: Set up Node.js
  #       uses: actions/setup-node@v3
  #       with:
  #         node-version: "20"

  #     - name: Install dependencies
  #       run: |
  #         npm install
  #       working-directory: frontend/bitmatch

  #     - name: Build frontend
  #       run: npm run build
  #       env:
  #         VITE_CLERK_PUBLISHABLE_KEY: ${{ secrets.VITE_CLERK_PUBLISHABLE_KEY }}
  #         VITE_SERVER_HOST: ${{ secrets.VITE_SERVER_HOST }}
  #         VITE_GEMINI_API_KEY: ${{ secrets.VITE_GEMINI_API_KEY }}
  #       working-directory: frontend/bitmatch

  #     - name: Sync build to S3
  #       run: |
  #         aws s3 sync ./dist s3://bitmatch-frontend-bucket --delete
  #       working-directory: frontend/bitmatch

  #     - name: Invalidate CloudFront cache
  #       run: |
  #         aws cloudfront create-invalidation --distribution-id E29MAKOIPEX4G3 --paths "/*"