draletaha/.gitea/workflows/ci-cd.yml

name: CI/CD

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

concurrency:
  group: drsousan-cicd-${{ github.ref }}
  cancel-in-progress: true

# ─────────────────────────────────────────────────────────────────────────────
# HOW THIS WORKS
# ─────────────────────────────────────────────────────────────────────────────
# Runner labels:
#   ubuntu-latest → container runner  ← CI dotnet build runs here
#   self-hosted   → host runner       ← docker build/push/deploy runs here
#
# Local Nexus:
#   Docker registry → mirrors.soroushasadi.com  (group: pull | host: push)
#   NuGet           → 171.22.25.73:8081/repository/nuget-group/
#
# Required Gitea secrets:
#   ENV_FILE           → contents of .env
#   REGISTRY_PASSWORD  → Nexus admin password
#   REGISTRY_USER      → Nexus username (usually: admin)
# ─────────────────────────────────────────────────────────────────────────────

jobs:

  # ── CI: compile-check (runs on every push / PR) ──────────────────────────────
  ci:
    name: "CI · dotnet build"
    runs-on: ubuntu-latest
    container:
      image: mirrors.soroushasadi.com/dotnet/sdk:10.0
      options: --add-host=gitea:host-gateway
    steps:
      - name: Checkout
        env:
          TOKEN: ${{ github.token }}
          REF:   ${{ github.ref }}
        run: |
          git init
          git remote add origin "${{ github.server_url }}/${{ github.repository }}.git"
          git config http.extraheader "Authorization: Bearer ${TOKEN}"
          git fetch --depth=1 origin "${REF}"
          git checkout FETCH_HEAD

      - name: Restore
        working-directory: DrSousan.Api
        env:
          DOTNET_CLI_TELEMETRY_OPTOUT: 1
        run: dotnet restore DrSousan.Api.csproj

      - name: Build
        working-directory: DrSousan.Api
        run: dotnet build DrSousan.Api.csproj --no-restore -c Release

  # ── CD: build image → push to Nexus → deploy (push to main only) ────────────
  deploy:
    name: "Deploy · drsousan"
    runs-on: self-hosted
    env:
      PATH: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
      REGISTRY: mirrors.soroushasadi.com
      IMAGE: mirrors.soroushasadi.com/drsousan/api
    needs: [ci]
    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
    timeout-minutes: 20

    steps:
      - name: Checkout
        env:
          TOKEN: ${{ github.token }}
          REF:   ${{ github.ref }}
        run: |
          git init
          git remote add origin "${{ github.server_url }}/${{ github.repository }}.git"
          git config http.extraheader "Authorization: Bearer ${TOKEN}"
          git fetch --depth=1 origin "${REF}"
          git checkout FETCH_HEAD

      - name: Write .env
        run: printf '%s' "$ENV_FILE" > .env
        env:
          ENV_FILE: ${{ secrets.ENV_FILE }}

      - name: Login to Nexus registry
        run: echo "$REGISTRY_PASSWORD" | docker login "$REGISTRY" -u "$REGISTRY_USER" --password-stdin
        env:
          REGISTRY_USER:     ${{ secrets.REGISTRY_USER }}
          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}

      - name: Build image
        run: |
          docker compose build api
          docker tag mirrors.soroushasadi.com/drsousan/api:latest \
                      mirrors.soroushasadi.com/drsousan/api:${{ github.sha }}
        env:
          DOCKER_BUILDKIT: 1

      - name: Push image to Nexus
        run: |
          docker push mirrors.soroushasadi.com/drsousan/api:latest
          docker push mirrors.soroushasadi.com/drsousan/api:${{ github.sha }}

      - name: Deploy
        run: docker compose up -d --no-deps api

      - name: Wait for healthy
        run: |
          for i in $(seq 1 24); do
            STATUS=$(docker inspect --format='{{.State.Health.Status}}' drsousan_api 2>/dev/null || echo "missing")
            echo "  [$i/24] $STATUS"
            [ "$STATUS" = "healthy" ] && echo "✅ drsousan_api healthy" && exit 0
            sleep 5
          done
          echo "❌ timed out"
          docker compose logs --tail=60 api
          exit 1

      - name: Show containers
        if: always()
        run: docker compose ps

      - name: Prune old images
        if: success()
        run: docker image prune -f