cicd.yaml

name: Docker Build and Push

on:
  push:
    branches:
      - main
      - develop
      - feat/env
  pull_request:
    branches:
      - main
      - feat/env

env:
  IMAGE_NAME: ${{ secrets.DOCKER_USERNAME }}/front
  IMAGE_TAG: latest

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Docker Hub Login
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_TOKEN }}

      - name: Build and Push Image
        run: |
          docker build \
            --build-arg NEXT_PUBLIC_API_URL=${{ secrets.NEXT_PUBLIC_API_URL }} \
            --build-arg NEXT_PUBLIC_SOCKET_URL=${{ secrets.NEXT_PUBLIC_SOCKET_URL }} \
            --build-arg NEXT_PUBLIC_AWS_REGION=${{ secrets.AWS_REGION }} \
            --build-arg NEXT_PUBLIC_AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }} \
            --build-arg NEXT_PUBLIC_AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY }} \
            --build-arg NEXT_PUBLIC_AWS_S3_BUCKET=${{ secrets.AWS_S3_BUCKET }} \
            --build-arg NEXT_PUBLIC_CLOUDFRONT_DOMAIN=${{ secrets.CLOUDFRONT_DOMAIN }} \
            -t $IMAGE_NAME:$IMAGE_TAG .
          docker push $IMAGE_NAME:$IMAGE_TAG

  deploy:
    needs: build-and-push
    runs-on: ubuntu-latest
    steps:
      - name: Set up SSH
        uses: webfactory/ssh-agent@v0.9.0
        with:
          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}

      - name: Add known_hosts
        run: |
          mkdir -p ~/.ssh
          ssh-keyscan -H ${{ secrets.SERVER_HOST }} >> ~/.ssh/known_hosts


      - name: Deploy to EC2
        run: |
          ssh ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }} 'bash -s' <<EOF
          set -e

          DOCKER_USERNAME=${{ secrets.DOCKER_USERNAME }}
          DOCKER_TOKEN=${{ secrets.DOCKER_TOKEN }}
          IMAGE_NAME=\$DOCKER_USERNAME/front:latest

          echo ">>> Docker Hub login"
          echo "\$DOCKER_TOKEN" | docker login -u "\$DOCKER_USERNAME" --password-stdin

          echo ">>> Pull latest image: \$IMAGE_NAME"
          docker pull "\$IMAGE_NAME"

          echo ">>> Move to app directory"
          mkdir -p /home/${{ secrets.SERVER_USER }}/app

          echo ">>> docker compose down (if exists)"
          docker compose /home/${{ secrets.SERVER_USER }}/app/docker-compose.yml down || true

          echo ">>> docker compose up -d"
          docker compose /home/${{ secrets.SERVER_USER }}/app/docker-compose.yml up -d

          echo ">>> Deployed!"
          EOF