docker-publish.yml

name: Build and Publish Docker Image

on:
  workflow_dispatch:
    inputs:
      version:
        description: "Version tag (e.g., 1.0.2)"
        required: true
        type: string

env:
  IMAGE: sweetr/sweetr

jobs:
  validate:
    runs-on: ubuntu-latest
    permissions:
      contents: read

    services:
      postgres:
        image: postgres:16
        env:
          POSTGRES_USER: test
          POSTGRES_PASSWORD: test
          POSTGRES_DB: sweetr_test
        ports:
          - 5432:5432
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
      dragonfly:
        image: docker.dragonflydb.io/dragonflydb/dragonfly
        ports:
          - 6379:6379
        options: >-
          --health-cmd "redis-cli ping"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./apps/api/Dockerfile
          push: false
          load: true
          tags: ${{ env.IMAGE }}:test
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Start container
        run: |
          docker run -d --name sweetr-api --network host \
            -e PORT=8000 \
            -e FRONTEND_URL=http://localhost:3000 \
            -e USE_SELF_SIGNED_SSL=false \
            -e JWT_SECRET=test-secret \
            -e DATABASE_URL=postgres://test:test@localhost:5432/sweetr_test \
            -e REDIS_CONNECTION_STRING=redis://localhost:6379 \
            -e GITHUB_CLIENT_SECRET=test \
            -e GITHUB_CLIENT_ID=test \
            -e GITHUB_APP_HANDLE=test \
            -e GITHUB_APP_ID=test \
            -e GITHUB_APP_PRIVATE_KEY=test \
            -e GITHUB_WEBHOOK_SECRET=test \
            ${{ env.IMAGE }}:test

      - name: Wait for API to be ready
        run: |
          for i in $(seq 1 30); do
            if curl -sf http://localhost:8000/health > /dev/null 2>&1; then
              echo "API is healthy"
              exit 0
            fi
            echo "Waiting for API... (attempt $i/30)"
            sleep 2
          done
          echo "API failed to start. Container logs:"
          docker logs sweetr-api
          exit 1

  publish:
    needs: validate
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./apps/api/Dockerfile
          push: true
          tags: |
            ${{ env.IMAGE }}:${{ inputs.version }}
            ${{ env.IMAGE }}:latest
          cache-from: type=gha
          cache-to: type=gha,mode=max