docker-webapp.yml

name: Docker WebApp
on:
  workflow_run:
    workflows: ["Angular WebApp Build"]
    types: [completed]
    branches: [main]
    tags: ['v*.*.*', 'latest']
  release:
    types: [published]
  workflow_dispatch:
    inputs:
      branch:
        description: 'Branch or commit to build'
        required: true
        default: 'main'
env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}-webapp
jobs:
  deploy-web:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'release' || github.event_name == 'workflow_dispatch' }}
    steps:
      - uses: haya14busa/action-cond@v1
        id: condval
        with:
          cond: ${{ github.event_name == 'workflow_dispatch' }}
          if_true: "${{ github.event.inputs.branch }}"
          if_false: " ${{ github.ref_name }}"
      - name: Checkout repository
        uses: actions/checkout@v6
        with:
          ref: ${{ steps.condval.outputs.value }}
      # Login against a Docker registry except on PR
      # https://github.com/docker/login-action
      - name: Log into registry ${{ env.REGISTRY }}
        if: github.event_name != 'pull_request'
        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      # Extract metadata (tags, labels) for Docker
      # https://github.com/docker/metadata-action
      - name: Extract Docker metadata
        id: meta
        uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302
        with:
          images: |
            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
      # GitHub Action to install QEMU static binaries.
      # https://github.com/docker/setup-qemu-action
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v4.1.0
      # GitHub Action to set up Docker Buildx.
      # https://github.com/docker/setup-buildx-action
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4.1.0
      # Build and push Docker image with Buildx (don't push on PR)
      # https://github.com/docker/build-push-action
      # Determine Dockerfile and cache scope based on branch/event
      - name: Set build configuration
        id: build-config
        run: |
          if [[ "${{ github.event_name }}" == "release" ]] || [[ "${{ steps.condval.outputs.value }}" == *"main"* ]]; then
            echo "dockerfile=WebApp/Dockerfile.production" >> $GITHUB_OUTPUT
            echo "cache-scope=prod" >> $GITHUB_OUTPUT
            {
              echo 'tags<<EOF'
              echo '${{ steps.meta.outputs.tags }}'
              echo 'EOF'
            } >> $GITHUB_OUTPUT
          else
            echo "dockerfile=WebApp/Dockerfile" >> $GITHUB_OUTPUT
            echo "cache-scope=dev" >> $GITHUB_OUTPUT
            {
              echo 'tags<<EOF'
              echo '${{ steps.meta.outputs.tags }}'
              echo 'EOF'
            } >> $GITHUB_OUTPUT
          fi
      # Build and push Docker image with Buildx (don't push on PR)
      # https://github.com/docker/build-push-action
      - name: Build and push Docker image
        uses: docker/build-push-action@v7.2.0
        with:
          context: WebApp/
          file: ${{ steps.build-config.outputs.dockerfile }}
          push: ${{ github.event_name != 'pull_request' }}
          tags: ${{ steps.build-config.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
          platforms: linux/amd64
          cache-from: type=gha, scope=${{ github.workflow }}-${{ steps.build-config.outputs.cache-scope }}
          cache-to: type=gha, scope=${{ github.workflow }}-${{ steps.build-config.outputs.cache-scope }}