docker-publish.yml

name: Build and Publish Docker Images

on:
  workflow_dispatch:
    inputs:
      version:
        description: "Version tag (e.g., 1.0.2)"
        required: true
        type: string

env:
  API_IMAGE: sweetr/api
  WEB_IMAGE: sweetr/web

jobs:
  validate-api:
    runs-on: ubuntu-latest
    permissions:
      contents: read

    services:
      postgres:
        image: postgres:16
        env:
          POSTGRES_USER: test
          POSTGRES_PASSWORD: test
          POSTGRES_DB: sweetr_test
        ports:
          - 5432:5432
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
      dragonfly:
        image: docker.dragonflydb.io/dragonflydb/dragonfly
        env:
          DFLY_cluster_mode: emulated
          DFLY_lock_on_hashtags: "true"

        ports:
          - 6379:6379
        options: >-
          --health-cmd "redis-cli ping"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build API image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./apps/api/Dockerfile
          push: false
          load: true
          tags: ${{ env.API_IMAGE }}:test
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Start API container
        run: |
          docker run -d --name sweetr-api --network host \
            -e PORT=8000 \
            -e FRONTEND_URL=http://localhost:3000 \
            -e USE_SELF_SIGNED_SSL=false \
            -e JWT_SECRET=test-secret \
            -e DATABASE_URL=postgres://test:test@localhost:5432/sweetr_test \
            -e REDIS_CONNECTION_STRING=redis://localhost:6379 \
            -e GITHUB_CLIENT_SECRET=test \
            -e GITHUB_CLIENT_ID=test \
            -e GITHUB_APP_HANDLE=test \
            -e GITHUB_APP_ID=test \
            -e GITHUB_APP_PRIVATE_KEY=test \
            -e GITHUB_WEBHOOK_SECRET=test \
            ${{ env.API_IMAGE }}:test

      - name: Wait for API to be ready
        run: |
          for i in $(seq 1 30); do
            if curl -sf http://localhost:8000/health > /dev/null 2>&1; then
              echo "API is healthy"
              exit 0
            fi
            echo "Waiting for API... (attempt $i/30)"
            sleep 2
          done
          echo "API failed to start. Container logs:"
          docker logs sweetr-api
          exit 1

  validate-web:
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build Web image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./apps/web/Dockerfile
          push: false
          load: true
          tags: ${{ env.WEB_IMAGE }}:test
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Start Web container
        run: |
          docker run -d --name sweetr-web -p 8080:80 \
            -e API_ENDPOINT=http://localhost:8000 \
            -e AUTH_COOKIE_DOMAIN=localhost \
            -e GITHUB_APP=test \
            ${{ env.WEB_IMAGE }}:test

      - name: Wait for Web to be ready
        run: |
          for i in $(seq 1 15); do
            if curl -sf http://localhost:8080/env-config.js > /dev/null 2>&1; then
              echo "Web is healthy"
              exit 0
            fi
            echo "Waiting for Web... (attempt $i/15)"
            sleep 2
          done
          echo "Web failed to start. Container logs:"
          docker logs sweetr-web
          exit 1

  publish:
    needs: [validate-api, validate-web]
    runs-on: ubuntu-latest
    permissions:
      contents: read

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Build and push API image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./apps/api/Dockerfile
          platforms: linux/amd64,linux/arm64
          push: true
          tags: |
            ${{ env.API_IMAGE }}:${{ inputs.version }}
            ${{ env.API_IMAGE }}:latest
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Build and push Web image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./apps/web/Dockerfile
          platforms: linux/amd64,linux/arm64
          push: true
          tags: |
            ${{ env.WEB_IMAGE }}:${{ inputs.version }}
            ${{ env.WEB_IMAGE }}:latest
          cache-from: type=gha
          cache-to: type=gha,mode=max