main.yml

name: CI/CD OITAssist

on:
  push:
    branches: [ dev ]
  pull_request:
    branches: [ dev ]
  workflow_dispatch:
  repository_dispatch:
    types: [ frontend-built ]

env:
  REGISTRY: ghcr.io
  FRONTEND_REF: dev

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6

      - name: Set up JDK 25
        uses: actions/setup-java@v5
        with:
          java-version: 25
          distribution: temurin
          cache: maven

      - name: Verify project
        run: mvn clean verify

          #- name: Run a multi-line script
          #  env:
          #    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          #    SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
          #  run: |
          #      git fetch --unshallow
          #      mvn clean install sonar:sonar \
          #        -Dsonar.projectKey=ita-social-projects_oitAssist \
          #        -Dsonar.organization=ita-social-projects \
        #        -Dsonar.host.url=https://sonarcloud.io \

      - name: Test Reporter
        uses: dorny/test-reporter@31a54ee7ebcacc03a09ea97a7e5465a47b84aea5  # v1.9.1
        if: success() || failure()
        with:
          name: Tests Report
          path: '**/target/surefire-reports/TEST-*.xml,**/target/failsafe-reports/TEST-*.xml'
          reporter: java-junit

  build-and-push-backend-image:
    needs: build
    if: github.event_name == 'push' && github.ref == 'refs/heads/dev'
    runs-on: ubuntu-latest
    permissions:
      packages: write
      contents: read

    steps:
      - uses: actions/checkout@v6

      - name: Set up JDK 25
        uses: actions/setup-java@v5
        with:
          java-version: 25
          distribution: temurin

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20

      - name: Checkout frontend repo
        uses: actions/checkout@v4
        with:
          repository: ita-social-projects/oitClient
          ref: ${{ env.FRONTEND_REF }}
          path: frontend

      - name: Capture frontend build metadata
        run: |
          COMMIT_ID=$(git -C frontend rev-parse HEAD)
          COMMIT_TIME=$(date -u -d "$(git -C frontend log -1 --format=%cI)" +%Y-%m-%dT%H:%M:%SZ)
          VERSION=$(node -p "require('./frontend/package.json').version || ''")
          {
            echo "oit.frontend.commit-id=$COMMIT_ID"
            echo "oit.frontend.short-commit-id=${COMMIT_ID:0:7}"
            echo "oit.frontend.commit-time=$COMMIT_TIME"
            echo "oit.frontend.branch=$FRONTEND_REF"
            echo "oit.frontend.version=$VERSION"
          } > src/main/resources/frontend-info.properties

      - name: Build frontend
        run: |
          cd frontend
          npm install -g pnpm
          pnpm install
          pnpm run build

      - name: Copy frontend into backend
        run: |
          mkdir -p src/main/resources/static
          rm -rf src/main/resources/static/*
          cp -r frontend/dist/* src/main/resources/static/

      - name: Build backend jar
        run: mvn clean package -DskipTests

      - name: Login to GitHub Packages
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push Docker image for backend
        uses: docker/build-push-action@v5
        with:
          context: .
          push: true
          tags: ${{ env.REGISTRY }}/${{ github.repository_owner }}/oitassist/build:latest

  deploy:
    needs: build-and-push-backend-image
    runs-on: ubuntu-latest
    if: github.event_name == 'push' && github.ref == 'refs/heads/dev'
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Copy docker-compose.yml to VM
        uses: appleboy/scp-action@v0.1.7
        with:
          host: ${{ secrets.AZURE_VM_HOST }}
          username: ${{ secrets.AZURE_VM_USER }}
          key: ${{ secrets.AZURE_VM_SSH_KEY }}
          source: "docker-compose.yml"
          target: "/home/azureoit/oitassist"

      - name: Deploy to Azure VM via SSH
        uses: appleboy/ssh-action@v1.0.3
        env:
          DATASOURCE_URL: ${{secrets.DATASOURCE_URL}}
          DATASOURCE_USERNAME: ${{ secrets.DATASOURCE_USERNAME }}
          DATASOURCE_PASSWORD: ${{ secrets.DATASOURCE_PASSWORD }}
          DATASOURCE_DRIVER: ${{secrets.DATASOURCE_DRIVER}}
          SPRING_PROFILES_ACTIVE: ${{secrets.SPRING_PROFILES_ACTIVE}}
          SPRING_LIQUIBASE_ENABLED: ${{secrets.LIQUIBASE_ENABLED}}
          SPRING_LIQUIBASE_CHANGE_LOG: ${{secrets.LIQUIBASE_CHANGE_LOG}}
          SPRING_LIQUIBASE_DROP_FIRST: ${{secrets.LIQUIBASE_DROP_FIRST}}
          JPA_SHOW_SQL: ${{secrets.JPA_SHOW_SQL}}
          JPA_OPEN_IN_VIEW: ${{secrets.JPA_OPEN_IN_VIEW}}
          JPA_HIBERNATE_DDL_AUTO: ${{secrets.JPA_HIBERNATE_DDL_AUTO}}
          JWT_VALIDITY: ${{secrets.JWT_VALIDITY}}
          JWT_SIGN_KEY: ${{secrets.JWT_SIGN_KEY}}
          JWT_ENCRYPTED_KEY: ${{secrets.JWT_ENCRYPTED_KEY}}
          LOG_LEVEL_LOGBOOK: ${{secrets.LOG_LEVEL_LOGBOOK}}
          MAIL_USERNAME: ${{secrets.MAIL_USERNAME}}
          MAIL_PASSWORD: ${{secrets.MAIL_PASSWORD}}
          GRAPH_TENANT_ID: ${{secrets.GRAPH_TENANT_ID}}
          GRAPH_CLIENT_ID: ${{secrets.GRAPH_CLIENT_ID}}
          GRAPH_CLIENT_SECRET: ${{secrets.GRAPH_CLIENT_SECRET}}
          GRAPH_DRIVE_ID: ${{secrets.GRAPH_DRIVE_ID}}
        with:
          host: ${{ secrets.AZURE_VM_HOST }}
          username: ${{ secrets.AZURE_VM_USER }}
          key: ${{ secrets.AZURE_VM_SSH_KEY }}
          envs: DATASOURCE_URL,DATASOURCE_USERNAME,DATASOURCE_PASSWORD,DATASOURCE_DRIVER,SPRING_PROFILES_ACTIVE,SPRING_LIQUIBASE_ENABLED,SPRING_LIQUIBASE_CHANGE_LOG,SPRING_LIQUIBASE_DROP_FIRST,JPA_SHOW_SQL,JPA_OPEN_IN_VIEW,JPA_HIBERNATE_DDL_AUTO,JWT_VALIDITY,JWT_SIGN_KEY,JWT_ENCRYPTED_KEY,LOG_LEVEL_LOGBOOK,MAIL_USERNAME,MAIL_PASSWORD, GRAPH_TENANT_ID,GRAPH_CLIENT_ID,GRAPH_CLIENT_SECRET,GRAPH_DRIVE_ID
          script: |
            cd /home/azureoit/oitassist
            docker compose pull
            docker compose up -d