dev #13
@@ -1,47 +1,14 @@
|
|||||||
name: Build, Test, Deploy and Analysis
|
name: Build and Deploy
|
||||||
|
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
branches: [main, int, dev]
|
branches: [main, int, dev]
|
||||||
pull_request:
|
|
||||||
branches: [main, int, dev]
|
|
||||||
workflow_dispatch:
|
|
||||||
|
|
||||||
concurrency:
|
concurrency:
|
||||||
group: print-calculator-${{ gitea.ref }}
|
group: print-calculator-deploy-${{ gitea.ref }}
|
||||||
cancel-in-progress: true
|
cancel-in-progress: true
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
# --- JOB DI ANALISI (In parallelo) ---
|
|
||||||
qodana:
|
|
||||||
if: ${{ gitea.event_name == 'pull_request' }}
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Checkout
|
|
||||||
uses: actions/checkout@v4
|
|
||||||
with:
|
|
||||||
fetch-depth: 0 # Fondamentale per Qodana per analizzare la storia
|
|
||||||
|
|
||||||
- name: Prepare Qodana directories
|
|
||||||
shell: bash
|
|
||||||
run: |
|
|
||||||
mkdir -p .qodana/caches .qodana/results
|
|
||||||
|
|
||||||
- name: 'Qodana Scan'
|
|
||||||
uses: JetBrains/qodana-action@v2025.3
|
|
||||||
env:
|
|
||||||
QODANA_TOKEN: ${{ secrets.QODANA_TOKEN }}
|
|
||||||
with:
|
|
||||||
cache-dir: .qodana/caches
|
|
||||||
results-dir: .qodana/results
|
|
||||||
args: -i,backend
|
|
||||||
# In Gitea, pr-mode funziona se il runner ha accesso ai dati del clone
|
|
||||||
pr-mode: ${{ gitea.event_name == 'pull_request' }}
|
|
||||||
use-caches: false
|
|
||||||
# Nota: Gitea ha un supporto limitato per i commenti automatici
|
|
||||||
# rispetto a GitHub, ma l'analisi verrà eseguita correttamente.
|
|
||||||
post-pr-comment: false
|
|
||||||
use-annotations: true
|
|
||||||
test-backend:
|
test-backend:
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
@@ -61,6 +28,7 @@ jobs:
|
|||||||
./gradlew test
|
./gradlew test
|
||||||
|
|
||||||
build-and-push:
|
build-and-push:
|
||||||
|
needs: test-backend
|
||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
@@ -138,21 +106,15 @@ jobs:
|
|||||||
mkdir -p ~/.ssh
|
mkdir -p ~/.ssh
|
||||||
chmod 700 ~/.ssh
|
chmod 700 ~/.ssh
|
||||||
|
|
||||||
# 1) Prende il secret base64 e rimuove spazi/newline/CR
|
|
||||||
printf '%s' "${{ secrets.SSH_PRIVATE_KEY_B64 }}" | tr -d '\r\n\t ' > /tmp/key.b64
|
printf '%s' "${{ secrets.SSH_PRIVATE_KEY_B64 }}" | tr -d '\r\n\t ' > /tmp/key.b64
|
||||||
|
|
||||||
# 2) (debug sicuro) stampa solo la lunghezza della base64
|
|
||||||
echo "b64_len=$(wc -c < /tmp/key.b64)"
|
echo "b64_len=$(wc -c < /tmp/key.b64)"
|
||||||
|
|
||||||
# 3) Decodifica in chiave privata
|
|
||||||
base64 -d /tmp/key.b64 > ~/.ssh/id_ed25519
|
base64 -d /tmp/key.b64 > ~/.ssh/id_ed25519
|
||||||
|
|
||||||
# 4) Rimuove eventuali CRLF dentro la chiave (se proviene da Windows)
|
|
||||||
tr -d '\r' < ~/.ssh/id_ed25519 > ~/.ssh/id_ed25519.clean
|
tr -d '\r' < ~/.ssh/id_ed25519 > ~/.ssh/id_ed25519.clean
|
||||||
mv ~/.ssh/id_ed25519.clean ~/.ssh/id_ed25519
|
mv ~/.ssh/id_ed25519.clean ~/.ssh/id_ed25519
|
||||||
chmod 600 ~/.ssh/id_ed25519
|
chmod 600 ~/.ssh/id_ed25519
|
||||||
|
|
||||||
# 5) Validazione: se fallisce qui, la chiave NON è valida/corrotta
|
|
||||||
ssh-keygen -y -f ~/.ssh/id_ed25519 >/dev/null
|
ssh-keygen -y -f ~/.ssh/id_ed25519 >/dev/null
|
||||||
|
|
||||||
ssh-keyscan -H "${{ secrets.SERVER_HOST }}" >> ~/.ssh/known_hosts 2>/dev/null
|
ssh-keyscan -H "${{ secrets.SERVER_HOST }}" >> ~/.ssh/known_hosts 2>/dev/null
|
||||||
@@ -160,7 +122,6 @@ jobs:
|
|||||||
- name: Write env and compose to server
|
- name: Write env and compose to server
|
||||||
shell: bash
|
shell: bash
|
||||||
run: |
|
run: |
|
||||||
# 1. Recalculate TAG and OWNER_LOWER (jobs don't share ENV)
|
|
||||||
if [[ "${{ gitea.ref }}" == "refs/heads/main" ]]; then
|
if [[ "${{ gitea.ref }}" == "refs/heads/main" ]]; then
|
||||||
DEPLOY_TAG="prod"
|
DEPLOY_TAG="prod"
|
||||||
elif [[ "${{ gitea.ref }}" == "refs/heads/int" ]]; then
|
elif [[ "${{ gitea.ref }}" == "refs/heads/int" ]]; then
|
||||||
@@ -170,10 +131,8 @@ jobs:
|
|||||||
fi
|
fi
|
||||||
DEPLOY_OWNER=$(echo '${{ gitea.repository_owner }}' | tr '[:upper:]' '[:lower:]')
|
DEPLOY_OWNER=$(echo '${{ gitea.repository_owner }}' | tr '[:upper:]' '[:lower:]')
|
||||||
|
|
||||||
# 2. Start with the static env file content
|
|
||||||
cat "deploy/envs/${{ env.ENV }}.env" > /tmp/full_env.env
|
cat "deploy/envs/${{ env.ENV }}.env" > /tmp/full_env.env
|
||||||
|
|
||||||
# 3. Determine DB credentials
|
|
||||||
if [[ "${{ env.ENV }}" == "prod" ]]; then
|
if [[ "${{ env.ENV }}" == "prod" ]]; then
|
||||||
DB_URL="${{ secrets.DB_URL_PROD }}"
|
DB_URL="${{ secrets.DB_URL_PROD }}"
|
||||||
DB_USER="${{ secrets.DB_USERNAME_PROD }}"
|
DB_USER="${{ secrets.DB_USERNAME_PROD }}"
|
||||||
@@ -188,7 +147,6 @@ jobs:
|
|||||||
DB_PASS="${{ secrets.DB_PASSWORD_DEV }}"
|
DB_PASS="${{ secrets.DB_PASSWORD_DEV }}"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# 4. Append DB and Docker credentials (quoted)
|
|
||||||
printf '\nDB_URL="%s"\nDB_USERNAME="%s"\nDB_PASSWORD="%s"\n' \
|
printf '\nDB_URL="%s"\nDB_USERNAME="%s"\nDB_PASSWORD="%s"\n' \
|
||||||
"$DB_URL" "$DB_USER" "$DB_PASS" >> /tmp/full_env.env
|
"$DB_URL" "$DB_USER" "$DB_PASS" >> /tmp/full_env.env
|
||||||
|
|
||||||
@@ -200,25 +158,17 @@ jobs:
|
|||||||
printf 'ADMIN_PASSWORD="%s"\nADMIN_SESSION_SECRET="%s"\nADMIN_SESSION_TTL_MINUTES="%s"\n' \
|
printf 'ADMIN_PASSWORD="%s"\nADMIN_SESSION_SECRET="%s"\nADMIN_SESSION_TTL_MINUTES="%s"\n' \
|
||||||
"${{ secrets.ADMIN_PASSWORD }}" "${{ secrets.ADMIN_SESSION_SECRET }}" "$ADMIN_TTL" >> /tmp/full_env.env
|
"${{ secrets.ADMIN_PASSWORD }}" "${{ secrets.ADMIN_SESSION_SECRET }}" "$ADMIN_TTL" >> /tmp/full_env.env
|
||||||
|
|
||||||
# 5. Debug: print content (for debug purposes)
|
|
||||||
echo "Preparing to send env file with variables:"
|
echo "Preparing to send env file with variables:"
|
||||||
grep -Ev "PASSWORD|SECRET" /tmp/full_env.env || true
|
grep -Ev "PASSWORD|SECRET" /tmp/full_env.env || true
|
||||||
|
|
||||||
# 5. Send env to server
|
|
||||||
ssh -i ~/.ssh/id_ed25519 -o BatchMode=yes "${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}" \
|
ssh -i ~/.ssh/id_ed25519 -o BatchMode=yes "${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}" \
|
||||||
"setenv ${{ env.ENV }}" < /tmp/full_env.env
|
"setenv ${{ env.ENV }}" < /tmp/full_env.env
|
||||||
|
|
||||||
# 6. Send docker-compose.deploy.yml to server
|
|
||||||
ssh -i ~/.ssh/id_ed25519 -o BatchMode=yes "${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}" \
|
ssh -i ~/.ssh/id_ed25519 -o BatchMode=yes "${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}" \
|
||||||
"setcompose ${{ env.ENV }}" < docker-compose.deploy.yml
|
"setcompose ${{ env.ENV }}" < docker-compose.deploy.yml
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
- name: Trigger deploy on Unraid (forced command key)
|
- name: Trigger deploy on Unraid (forced command key)
|
||||||
shell: bash
|
shell: bash
|
||||||
run: |
|
run: |
|
||||||
set -euo pipefail
|
set -euo pipefail
|
||||||
|
|
||||||
# Aggiungiamo le opzioni di verbosità se dovesse fallire ancora,
|
|
||||||
# e assicuriamoci che l'input sia pulito
|
|
||||||
ssh -i ~/.ssh/id_ed25519 -o BatchMode=yes "${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}" "deploy ${{ env.ENV }}"
|
ssh -i ~/.ssh/id_ed25519 -o BatchMode=yes "${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}" "deploy ${{ env.ENV }}"
|
||||||
72
.gitea/workflows/pr-checks.yaml
Normal file
72
.gitea/workflows/pr-checks.yaml
Normal file
@@ -0,0 +1,72 @@
|
|||||||
|
name: PR Checks
|
||||||
|
|
||||||
|
on:
|
||||||
|
pull_request:
|
||||||
|
branches: [main, int, dev]
|
||||||
|
|
||||||
|
concurrency:
|
||||||
|
group: print-calculator-pr-${{ gitea.ref }}
|
||||||
|
cancel-in-progress: true
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
prettier:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- name: Checkout
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
|
- name: Setup Node 22
|
||||||
|
uses: actions/setup-node@v4
|
||||||
|
with:
|
||||||
|
node-version: '22'
|
||||||
|
|
||||||
|
- name: Check formatting with Prettier
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
npx --yes prettier@3.6.2 --check \
|
||||||
|
"frontend/src/**/*.{ts,html,scss,css,json}" \
|
||||||
|
".gitea/workflows/*.{yml,yaml}"
|
||||||
|
|
||||||
|
qodana:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- name: Checkout
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
with:
|
||||||
|
fetch-depth: 0
|
||||||
|
|
||||||
|
- name: Prepare Qodana directories
|
||||||
|
shell: bash
|
||||||
|
run: |
|
||||||
|
mkdir -p .qodana/caches .qodana/results
|
||||||
|
|
||||||
|
- name: Qodana Scan
|
||||||
|
uses: JetBrains/qodana-action@v2025.3
|
||||||
|
env:
|
||||||
|
QODANA_TOKEN: ${{ secrets.QODANA_TOKEN }}
|
||||||
|
with:
|
||||||
|
cache-dir: .qodana/caches
|
||||||
|
results-dir: .qodana/results
|
||||||
|
args: -i,backend
|
||||||
|
pr-mode: true
|
||||||
|
use-caches: false
|
||||||
|
post-pr-comment: false
|
||||||
|
use-annotations: true
|
||||||
|
|
||||||
|
test-backend:
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- name: Checkout
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
|
- name: Set up JDK 21
|
||||||
|
uses: actions/setup-java@v4
|
||||||
|
with:
|
||||||
|
java-version: '21'
|
||||||
|
distribution: 'temurin'
|
||||||
|
|
||||||
|
- name: Run Tests with Gradle
|
||||||
|
run: |
|
||||||
|
cd backend
|
||||||
|
chmod +x gradlew
|
||||||
|
./gradlew test
|
||||||
Reference in New Issue
Block a user