build: add custom quali.chat github workflows

Author: venimus

.github/workflows/dockerhub.yaml

@@ -0,0 +1,61 @@
+name: Dockerhub
+on:
+  workflow_dispatch: {}
+  push:
+    tags: [v*]
+    branches:
+      - 'develop'
+      - 'main'
+concurrency: ${{ github.workflow }}-${{ github.ref_name }}
+
+jobs:
+  buildx:
+    name: Docker Buildx
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 50 # needed for docker-package to be able to calculate the version
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3 # v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3 # v3
+        with:
+          install: true
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3 # v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5 # v5
+        with:
+          images: |
+            qualichat/qualichat-web
+          tags: |
+            type=ref,enable=true,event=branch
+            type=ref,enable=true,event=tag
+            type=raw,enable=true,value={{branch}},event=workflow_dispatch
+          flavor: |
+            latest=${{ contains(github.ref_name, '-rc.') && 'false' || 'auto' }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v5 # v5
+        with:
+          context: .
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          secrets: |
+            "GITHUB_TOKEN=${{ secrets.NPM_GITHUB_TOKEN }}"
+  deploy:
+    name: Deploy via ssh (staging)
+    uses: ./.github/workflows/stag_deploy.yaml
+    secrets: inherit
+    needs: buildx

.github/workflows/prod_deploy.yaml

@@ -0,0 +1,20 @@
+name: Production deploy
+on:
+  workflow_dispatch:
+    inputs:
+      VERSION:
+        description: "Version to deploy to prod"
+        default: "latest"
+        required: false
+        type: string
+  workflow_call:
+jobs:
+  call_deploy:
+    name: Call Deploy prod via ssh
+    uses: ./.github/workflows/ssh_deploy.yaml
+    with:
+      VERSION: ${{ inputs.VERSION }}
+    secrets:
+      DEPLOY_HOST: "${{ secrets.PROD_DEPLOY_HOST }}"
+      DEPLOY_USERNAME: "${{ secrets.PROD_DEPLOY_USERNAME }}"
+      DEPLOY_KEY: "${{ secrets.PROD_DEPLOY_KEY }}"

.github/workflows/ssh_deploy.yaml

@@ -0,0 +1,40 @@
+# This workflow is only for inclusion in other workflows.
+name: Deploy via ssh
+on:
+  workflow_call:
+    inputs:
+      VERSION:
+        description: "Version to deploy"
+        required: false
+        default: "develop"
+        type: string
+    secrets:
+      DEPLOY_HOST:
+        description: "Host to deploy to"
+        required: true
+      DEPLOY_USERNAME:
+        description: "Username to use for ssh"
+        required: true
+      DEPLOY_KEY:
+        description: "SSH key to use for ssh"
+        required: true
+jobs:
+  deploy:
+    name: Deploy via ssh
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run deploy script
+        uses: appleboy/ssh-action@v1.0.0
+        env:
+          VERSION: "${{ inputs.VERSION }}"
+          SHA: "${{ github.sha }}"
+        with:
+          host: "${{ secrets.DEPLOY_HOST }}"
+          username: "${{ secrets.DEPLOY_USERNAME }}"
+          key: "${{ secrets.DEPLOY_KEY }}"
+          envs: >
+            SHA
+          script: |
+            echo $SHA > ~/element-REVISION || true
+            docker pull "qualichat/qualichat-web:${{ inputs.VERSION }}" || true
+            systemctl restart matrix-client-element

.github/workflows/stag_deploy.yaml

@@ -0,0 +1,26 @@
+name: Staging deploy
+on:
+  workflow_dispatch:
+    inputs:
+      VERSION:
+        description: "Version to deploy to staging"
+        default: "develop"
+        required: false
+        type: string
+  workflow_call:
+    inputs:
+      VERSION:
+        description: "Version to deploy to staging"
+        default: "develop"
+        required: false
+        type: string
+jobs:
+  call_deploy:
+    name: Call Deploy stag via ssh
+    uses: ./.github/workflows/ssh_deploy.yaml
+    with:
+      VERSION: ${{ inputs.VERSION }}
+    secrets:
+      DEPLOY_HOST: "${{ secrets.STAG_DEPLOY_HOST }}"
+      DEPLOY_USERNAME: "${{ secrets.STAG_DEPLOY_USERNAME }}"
+      DEPLOY_KEY: "${{ secrets.STAG_DEPLOY_KEY }}"