root
145 lines
4.6 KiB
YAML
145 lines
4.6 KiB
YAML
# Gitea CI/CD for alrahma_web_client (React + Vite + TypeScript)
|
|
#
|
|
# Triggers:
|
|
# - Push to any branch
|
|
# - Pull requests
|
|
# - Tags
|
|
#
|
|
# Stages: lint → build → deploy (manual)
|
|
|
|
name: Web Client CI/CD
|
|
|
|
on:
|
|
push:
|
|
branches: [main, master, develop, 'feature/**', 'fix/**']
|
|
tags: ['v*']
|
|
pull_request:
|
|
branches: [main, master, develop]
|
|
|
|
env:
|
|
CI: true
|
|
|
|
jobs:
|
|
# ──────────────────────────────────────────────
|
|
# LINT: ESLint with TypeScript
|
|
# ──────────────────────────────────────────────
|
|
lint:
|
|
name: Lint (ESLint + TypeScript)
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: node:22-alpine
|
|
steps:
|
|
- name: Checkout repository
|
|
env:
|
|
GIT_SSL_NO_VERIFY: "1"
|
|
run: |
|
|
apk add --no-cache git
|
|
git clone --depth 1 \
|
|
"https://x-access-token:${GITEA_TOKEN}@${GITEA_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" \
|
|
.
|
|
git fetch --depth 1 origin "${{ github.sha }}"
|
|
git checkout "${{ github.sha }}"
|
|
shell: sh
|
|
|
|
- name: Cache npm dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: node_modules/
|
|
key: ${{ runner.os }}-npm-${{ hashFiles('package-lock.json') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-npm-
|
|
|
|
- name: Install dependencies
|
|
run: npm ci --no-audit --no-fund
|
|
|
|
- name: Run ESLint
|
|
run: npm run lint
|
|
|
|
# ──────────────────────────────────────────────
|
|
# BUILD: TypeScript + Vite
|
|
# ──────────────────────────────────────────────
|
|
build:
|
|
name: Build (tsc + Vite)
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: node:22-alpine
|
|
steps:
|
|
- name: Checkout repository
|
|
env:
|
|
GIT_SSL_NO_VERIFY: "1"
|
|
run: |
|
|
apk add --no-cache git
|
|
git clone --depth 1 \
|
|
"https://x-access-token:${GITEA_TOKEN}@${GITEA_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" \
|
|
.
|
|
git fetch --depth 1 origin "${{ github.sha }}"
|
|
git checkout "${{ github.sha }}"
|
|
shell: sh
|
|
|
|
- name: Cache npm dependencies
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: node_modules/
|
|
key: ${{ runner.os }}-npm-${{ hashFiles('package-lock.json') }}
|
|
restore-keys: |
|
|
${{ runner.os }}-npm-
|
|
|
|
- name: Install dependencies
|
|
run: npm ci --no-audit --no-fund
|
|
|
|
- name: Build project
|
|
run: npm run build
|
|
env:
|
|
VITE_API_ORIGIN: ${{ vars.VITE_API_ORIGIN || '' }}
|
|
|
|
- name: Upload build artifacts
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: dist
|
|
path: dist/
|
|
retention-days: 7
|
|
|
|
# ──────────────────────────────────────────────
|
|
# DEPLOY (manual): to shared hosting via SSH
|
|
# ──────────────────────────────────────────────
|
|
deploy:
|
|
name: Deploy to shared hosting
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: alpine:3.20
|
|
if: github.ref == 'refs/heads/develop'
|
|
needs: [lint, build]
|
|
environment:
|
|
name: production
|
|
url: ${{ vars.PRODUCTION_URL }}
|
|
steps:
|
|
- name: Checkout repository
|
|
env:
|
|
GIT_SSL_NO_VERIFY: "1"
|
|
run: |
|
|
apk add --no-cache git
|
|
git clone --depth 1 \
|
|
"https://x-access-token:${GITEA_TOKEN}@${GITEA_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git" \
|
|
.
|
|
git fetch --depth 1 origin "${{ github.sha }}"
|
|
git checkout "${{ github.sha }}"
|
|
shell: sh
|
|
|
|
- name: Install SSH and rsync
|
|
run: |
|
|
apk add --no-cache openssh-client sshpass rsync
|
|
|
|
- name: Download built artifacts
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: dist
|
|
path: dist/
|
|
|
|
- name: Deploy built files to shared hosting
|
|
run: |
|
|
sshpass -p "${{ secrets.SSH_PASSWORD }}" rsync -avz --delete \
|
|
-e "ssh -p ${{ vars.SSH_PORT || 22 }} -o StrictHostKeyChecking=no" \
|
|
--exclude='.htaccess' \
|
|
./dist/ \
|
|
${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}:${{ vars.SSH_TARGET_DIR }}/
|