chore: optimize images via CI

Reviewed-on: #9

.gitea/workflows/ci.yml.bak

@@ -7,25 +7,26 @@ on:
 
 jobs:
   ci:
-    uses: http://git.wdipl.com/Rajendra.Reddy/wdipl-actions/.gitea/workflows/ci.yml@main
+    uses: Rajendra.Reddy/wdipl-actions/.gitea/workflows/ci.yml@baedab602ca859a71cd77af59b5e4d21d6f7067a
 
     with:
       tech_stack: node
 
-      run_build: true
+      run_build: 'true'
-      run_sonar: true
+      run_sonar: 'true'
-      run_deploy: true
+      run_deploy: 'true'
-      wait_for_quality_gate: false
+      wait_for_quality_gate: 'false'
 
       app_path_beta: /var/www/app-beta
+      app_path_testing: /var/www/app-testing
       app_path_staging: /var/www/app-staging
       app_path_prod: /var/www/app-prod
 
       pm2_id: app
 
     secrets:
-      SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+      SONARQUBE_HOST: ${{ secrets.SONARQUBE_HOST }}
-      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      SONARQUBE_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
 
       BETA_SERVER_HOST: ${{ secrets.BETA_SERVER_HOST }}
       BETA_SERVER_PORT: ${{ secrets.BETA_SERVER_PORT }}

.gitea/workflows/compressimages.yml

@@ -0,0 +1,94 @@
+name: Enforce Image Standards
+
+on:
+  pull_request:
+    branches:
+      - main
+      - beta
+      - testing
+      - client
+      - staging
+      - production
+    types: [opened, synchronize, reopened]
+    paths:
+      - '**/*.jpg'
+      - '**/*.jpeg'
+      - '**/*.png'
+
+  workflow_dispatch:
+    inputs:
+      target_branch:
+        description: "Branch to optimize images on"
+        required: false
+        default: "main"
+
+jobs:
+  optimize:
+    runs-on: ubuntu-latest
+
+    # 🚀 Use your internal image (no apt needed)
+    container:
+      image: git.wdipl.com/wdi-public/image-optimizer:latest
+      #credentials:
+        #username: ${{ secrets.REGISTRY_USER }}
+        #password: ${{ secrets.REGISTRY_PASSWORD }}
+
+    steps:
+      # 🔀 Decide branch (PR vs manual)
+      - name: Determine Branch
+        id: branch
+        run: |
+          if [ "${{ gitea.event_name }}" = "pull_request" ]; then
+            echo "branch=${{ gitea.head_ref }}" >> $GITHUB_OUTPUT
+          else
+            echo "branch=${{ inputs.target_branch }}" >> $GITHUB_OUTPUT
+          fi
+
+      # 📥 Checkout correct branch
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: ${{ steps.branch.outputs.branch }}
+
+      # 🖼 Resize images
+      - name: Resize Oversized Images
+        run: |
+          find . -type f \( -iname "*.jpg" -o -iname "*.jpeg" -o -iname "*.png" \) \
+          -not -path "*/.git/*" \
+          -not -path "*/node_modules/*" \
+          -exec mogrify -resize 1920x1920\> {} \;
+
+      # 📉 Optimize JPEG
+      - name: Optimize JPEG
+        run: |
+          find . -type f \( -iname "*.jpg" -o -iname "*.jpeg" \) \
+          -not -path "*/.git/*" \
+          -not -path "*/node_modules/*" \
+          -exec jpegoptim --strip-all --max=85 {} \;
+
+      # 📉 Optimize PNG
+      - name: Optimize PNG
+        run: |
+          find . -type f -iname "*.png" \
+          -not -path "*/.git/*" \
+          -not -path "*/node_modules/*" \
+          -exec pngquant --force --ext .png --quality=75-90 {} \;
+
+      # 💾 Commit if changes exist
+      - name: Commit changes
+        run: |
+          git config --global user.name "CI Bot"
+          git config --global user.email "ci@local"
+
+          if [ -n "$(git status --porcelain)" ]; then
+            git add .
+            git commit -m "chore: optimize images via CI"
+          else
+            echo "No changes to commit"
+          fi
+
+      # 🚀 Push back to branch
+      - name: Push changes
+        run: |
+          git push origin HEAD:${{ steps.branch.outputs.branch }}

.gitea/workflows/sonar.yml

@@ -0,0 +1,39 @@
+name: Sonar Check
+
+on:
+  pull_request:
+    branches:
+      - main
+      - beta
+      - testing
+      - client
+      - staging
+      - production
+
+jobs:
+  sonarqube:
+    name: SonarQube Scan
+    runs-on: ubuntu-latest
+
+    container:
+      image: git.wdipl.com/wdi-public/sonar-scanner-cli:12.0.0.3214_8.0.1
+      options: --user root
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Run Sonar Scan
+        run: |
+          REPO_NAME=${{ gitea.event.repository.name }}
+
+          sonar-scanner \
+            -Dsonar.projectKey=$REPO_NAME \
+            -Dsonar.projectName=$REPO_NAME \
+            -Dsonar.sources=. \
+            -Dsonar.host.url=${{ secrets.SONARQUBE_HOST }} \
+            -Dsonar.token=${{ secrets.SONARQUBE_TOKEN }} \
+            -Dsonar.exclusions=node_modules/**,dist/**,coverage/** \
+            -Dsonar.qualitygate.wait=true

.gitignore

@@ -8,11 +8,11 @@ yarn-error.log*
 pnpm-debug.log*
 lerna-debug.log*
 
-# Environment files
+# Enviroment files
 .env
 .env.local
 .env.*.local
-
+.env.*.production
 # Build output
 dist/
 build/