paypoint-backend/.github/workflows/deploy-docker-to-tst.yml

name: Docker Image CI

on:
  push:
    branches:
      - develop
    tags:
      - "docker-build-*"

jobs:
  build-and-push:
    runs-on: ubuntu-latest

    steps:
      # Stap 1: Code ophalen
      - uses: actions/checkout@v4

      # Stap 2: Versienummer ophalen uit pom.xml en opslaan als artifact
      - name: Setup Java
        uses: actions/setup-java@v3
        with:
          java-version: '17'
          distribution: 'temurin'

      - name: Setup Maven + Java
        uses: s4u/setup-maven-action@v1.6.0
        with:
          java-version: '21'
          maven-version: '3.9.5'

      - name: Extract Quarkus version from pom.xml
        run: |
          VERSION=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)
          echo $VERSION > version.txt

      - name: Inject private key into resources
        run: |
          mkdir -p src/main/resources
          echo "${{ secrets.PRIVATE_KEY }}" > src/main/resources/privateKey.pem
          chmod 600 src/main/resources/privateKey.pem

      - name: Inject public key into resources
        run: |
          mkdir -p src/main/resources
          echo "${{ secrets.PUBLIC_KEY }}" > src/main/resources/publicKey.pem
          chmod 600 src/main/resources/publicKey.pem

      - name: Save version as artifact
        uses: actions/upload-artifact@v3
        with:
          name: version
          path: version.txt

      # Stap 3: Notify Mattermost via Bot (Build gestart)
      - name: Notify Mattermost via Bot
        env:
          VERSION: ${{ env.VERSION }}
          REPO: ${{ gitea.repository }}
          BRANCH: ${{ gitea.ref }}
          MATTERMOST_BOT_TOKEN: ${{ secrets.MATTERMOST_BOT_TOKEN }}
        run: |
          curl --fail -X POST -H "Authorization: Bearer $MATTERMOST_BOT_TOKEN" \
          -H 'Content-Type: application/json' \
          -d '{
                "channel_id": "9a8obynkd7rctk6qf8rfe6oppy",
                "message": "@all 🚀 *Build gestart!* Een nieuwe build is begonnen voor de repository *'"$REPO"'* op branch *'"$BRANCH"'*."
              }' \
          https://mattermost.melvanveen.nl/api/v4/posts

      # Stap 4: Inloggen bij Docker Hub
      - name: Log in to Docker Hub
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      # Stap 5: Quarkus JAR bouwen (via Maven) en Docker-image bouwen
      - name: Build the Quarkus JAR and Docker image
        run: |
          VERSION=$(cat version.txt)
          mvn clean package -DskipTests
          docker buildx build . --file Dockerfile-tst --tag veenm/paypoint-backend-jvm:$VERSION-SNAPSHOT --platform linux/amd64

      # Stap 6: Docker-image pushen naar Docker Hub (huidige versie tag)
      - name: Push the Docker image (version-snapshot)
        run: |
          VERSION=$(cat version.txt)
          docker push veenm/paypoint-backend-jvm:$VERSION-SNAPSHOT

  deploy:
    needs: build-and-push
    runs-on: ubuntu-latest

    steps:
      # Stap 1: Artifact ophalen
      - name: Download version artifact
        uses: actions/download-artifact@v3
        with:
          name: version

      # Stap 2: Lees versie uit het artifact
      - name: Read version
        id: read_version
        run: echo "VERSION=$(cat version.txt)" >> $GITHUB_ENV

      # Stap 3: Maak verbinding via SSH naar de Alpine server en update de container
      - name: SSH into Alpine and update Docker container
        uses: appleboy/ssh-action@v0.1.10
        with:
          host: ${{ secrets.ALPINE_HOST }}
          username: ${{ secrets.ALPINE_USER }}
          password: ${{ secrets.ALPINE_PASSWORD }}
          script: |
            VERSION=${{ env.VERSION }}
            echo "Gekozen versie: $VERSION-SNAPSHOT"

            # Stop en verwijder de huidige container
            docker stop paypoint-backend || true
            docker rm paypoint-backend || true

            # Haal de nieuwste image binnen
            docker pull veenm/paypoint-backend-jvm:$VERSION-SNAPSHOT

            # Start een nieuwe container
            docker run -d --name paypoint-backend --restart unless-stopped -p 15000:8080 \
            -e DB_HOST=${{ secrets.ALPINE_HOST }} \
            -e DB_PORT=${{ secrets.DB_PORT_TEST }} \
            -e DB_USERNAME=${{ secrets.DB_USERNAME_TEST }} \
            -e DB_PASSWORD=${{ secrets.DB_PASSWORD_TEST }} \
            -e CORS_ORIGINS=${{ secrets.CORS_ORIGINS_TEST }} \
            -e MAILER_FROM=${{ secrets.MAILER_FROM }} \
            -e MAILER_HOST=${{ secrets.MAILER_HOST }} \
            -e MAILER_PORT=${{ secrets.MAILER_PORT }} \
            -e MAILER_USERNAME=${{ secrets.MAILER_USERNAME }} \
            -e MAILER_PASSWORD=${{ secrets.MAILER_PASSWORD }} \
            veenm/paypoint-backend-jvm:$VERSION

            # Opruimen oude images
            docker image prune -f

      # Stap 4: Notify Mattermost via Bot (Build is geslaagd)
      - name: Notify Mattermost via Bot
        env:
          VERSION: ${{ env.VERSION }}
        run: |
          curl --fail -X POST -H "Authorization: Bearer $MATTERMOST_BOT_TOKEN" \
          -H 'Content-Type: application/json' \
          -d '{
                "channel_id": "9a8obynkd7rctk6qf8rfe6oppy",
                "message": "@all ✅ *Build is geslaagd!* Versie '"$VERSION"' staat klaar op https://test-paypoint.melvanveen.nl"
              }' \
          https://mattermost.melvanveen.nl/api/v4/posts