restore workflow files (no changes)
All checks were successful
Build-Check / Build and Test PR (pull_request) Successful in 2m28s
Enforce Image Standards / optimize (pull_request) Successful in 31s
Sonar Check / SonarQube Scan (pull_request) Successful in 1m48s

This commit is contained in:
2026-04-17 16:23:54 +05:30
parent 709827b5aa
commit fdb4f38164
4 changed files with 280 additions and 0 deletions

View File

@@ -0,0 +1,34 @@
name: Build-Check
on:
pull_request:
branches:
- main
- beta
- testing
- client
- staging
- production
jobs:
build-test:
name: Build and Test PR
runs-on: ubuntu-latest
steps:
- name: Checkout Code
uses: actions/checkout@v3
- name: Setup Node
uses: actions/setup-node@v4
with:
node-version: 20
- name: Install Dependencies
run: npm install
- name: Build Check
run: npm run build
- name: Audit Dependencies
run: npm audit --audit-level=critical

View File

@@ -0,0 +1,67 @@
name: Enforce Image Standards
on:
pull_request:
branches:
- main
- beta
- testing
- client
- staging
- production
types: [opened, synchronize, reopened]
paths:
- '**/*.jpg'
- '**/*.jpeg'
- '**/*.png'
workflow_dispatch:
jobs:
optimize:
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@v4
with:
fetch-depth: 0
ref: ${{ gitea.head_ref }} # IMPORTANT
- name: Install Image Tools
run: |
sudo apt-get update
sudo apt-get install -y imagemagick jpegoptim pngquant
- name: Resize Oversized Images
run: |
find . -type f \( -iname "*.jpg" -o -iname "*.jpeg" -o -iname "*.png" \) \
-exec mogrify -resize 1920x1920\> {} \;
- name: Optimize JPEG
run: |
find . -type f \( -iname "*.jpg" -o -iname "*.jpeg" \) \
-exec jpegoptim --strip-all --max=85 {} \;
- name: Optimize PNG
run: |
find . -type f -iname "*.png" \
-exec pngquant --force --ext .png --quality=75-90 {} \;
# Commit changes if any
- name: Commit changes
run: |
git config --global user.name "CI Bot"
git config --global user.email "ci@local"
if [ -n "$(git status --porcelain)" ]; then
git add .
git commit -m "chore: optimize images via CI"
else
echo "No changes to commit"
fi
# Push back to PR branch
- name: Push changes
if: success()
run: |
git push origin HEAD:${{ gitea.head_ref }}

140
.gitea/workflows/deploy.yml Normal file
View File

@@ -0,0 +1,140 @@
name: Deployment
on:
push:
branches:
- beta
- testing
- staging
- production
jobs:
deploy:
runs-on: ubuntu-latest
steps:
- name: Checkout Code in Runner
uses: actions/checkout@v3
- name: Branch and Folder Selection for Deployment
run: |
BRANCH_NAME=${{ gitea.ref_name }}
case $BRANCH_NAME in
beta)
echo "PROJECT_FOLDER=/home/user/app-beta" >> $GITHUB_ENV
echo "AUTH_TYPE=passwd" >> $GITHUB_ENV
echo "PM2_ID=app-beta[3000]" >> $GITHUB_ENV
echo "HOST=${{ secrets.BETA_SERVER_HOST }}" >> $GITHUB_ENV
echo "USERNAME=${{ secrets.BETA_SERVER_USERNAME }}" >> $GITHUB_ENV
echo "PASSWORD=${{ secrets.BETA_SERVER_PASSWORD }}" >> $GITHUB_ENV
echo "PORT=${{ secrets.BETA_SERVER_PORT }}" >> $GITHUB_ENV
;;
testing)
echo "PROJECT_FOLDER=/home/user/app-testing" >> $GITHUB_ENV
echo "AUTH_TYPE=passwd" >> $GITHUB_ENV
echo "PM2_ID=app-testing[3001]" >> $GITHUB_ENV
echo "HOST=${{ secrets.BETA_SERVER_HOST }}" >> $GITHUB_ENV
echo "USERNAME=${{ secrets.BETA_SERVER_USERNAME }}" >> $GITHUB_ENV
echo "PASSWORD=${{ secrets.BETA_SERVER_PASSWORD }}" >> $GITHUB_ENV
echo "PORT=${{ secrets.BETA_SERVER_PORT }}" >> $GITHUB_ENV
;;
staging)
echo "PROJECT_FOLDER=/var/www/app-staging" >> $GITHUB_ENV
echo "AUTH_TYPE=key" >> $GITHUB_ENV
echo "PM2_ID=app-staging[4000]" >> $GITHUB_ENV
echo "HOST=${{ secrets.STAGING_SERVER_HOST }}" >> $GITHUB_ENV
echo "USERNAME=${{ secrets.STAGING_SERVER_USERNAME }}" >> $GITHUB_ENV
echo "PORT=${{ secrets.STAGING_SERVER_PORT }}" >> $GITHUB_ENV
;;
production)
echo "PROJECT_FOLDER=/home/reactjs/Wdipl-react" >> $GITHUB_ENV
echo "AUTH_TYPE=passwd" >> $GITHUB_ENV
#echo "PM2_ID=wdipl_frontend[3001]" >> $GITHUB_ENV
echo "HOST=${{ secrets.PRODUCTION_SERVER_HOST }}" >> $GITHUB_ENV
echo "USERNAME=${{ secrets.PRODUCTION_SERVER_USERNAME }}" >> $GITHUB_ENV
echo "PASSWORD=${{ secrets.PRODUCTION_SERVER_PASSWORD }}" >> $GITHUB_ENV
echo "PORT=${{ secrets.PRODUCTION_SERVER_PORT }}" >> $GITHUB_ENV
;;
*)
echo "Unknown Branch"
exit 1
;;
esac
echo "BRANCH_NAME=${{ gitea.ref_name }}" >> $GITHUB_ENV
echo "SELECTED BRANCH : $BRANCH_NAME"
echo "SELECTED FOLDER : $PROJECT_FOLDER"
- name: Deployment via SSH (Password)
if: env.AUTH_TYPE == 'passwd'
uses: appleboy/ssh-action@v1
with:
host: ${{ env.HOST }}
username: ${{ env.USERNAME }}
password: ${{ env.PASSWORD }}
port: ${{ env.PORT }}
envs: BRANCH_NAME,PROJECT_FOLDER,PM2_ID
script: |
set -xe
# PM2_ID supports names like: app-name[port]
# Always wrap in quotes to avoid shell issues
echo $BRANCH_NAME
echo $PROJECT_FOLDER
cd $PROJECT_FOLDER
git fetch
git reset --hard origin/$BRANCH_NAME
git pull origin $BRANCH_NAME
echo "Latest commits:"
git log --oneline -5
echo "Installing dependencies..."
npm i && npm run build
#echo "Reloading PM2..."
#pm2 reload "$PM2_ID"
echo "Recent Logs:"
pm2 logs "$PM2_ID" --lines 50 --nostream
- name: Deployment via SSH (Key)
if: env.AUTH_TYPE == 'key'
uses: appleboy/ssh-action@v1
with:
host: ${{ env.HOST }}
username: ${{ env.USERNAME }}
key: ${{ gitea.ref_name == 'production' && secrets.PRODUCTION_SERVER_KEY || secrets.STAGING_SERVER_KEY }}
port: ${{ env.PORT }}
envs: BRANCH_NAME,PROJECT_FOLDER,PM2_ID
script: |
set -xe
echo $BRANCH_NAME
echo $PROJECT_FOLDER
cd $PROJECT_FOLDER
git fetch
git reset --hard origin/$BRANCH_NAME
git pull origin $BRANCH_NAME
echo "Latest commits:"
git log --oneline -5
echo "Installing dependencies..."
npm i && npm run build
echo "Reloading PM2..."
pm2 reload "$PM2_ID"
echo "Recent Logs:"
pm2 logs "$PM2_ID" --lines 50 --nostream

View File

@@ -0,0 +1,39 @@
name: Sonar Check
on:
pull_request:
branches:
- main
- beta
- testing
- client
- staging
- production
jobs:
sonarqube:
name: SonarQube Scan
runs-on: ubuntu-latest
container:
image: sonarsource/sonar-scanner-cli:12.0.0.3214_8.0.1
options: --user root
steps:
- name: Checkout Repository
uses: actions/checkout@v3
with:
fetch-depth: 0
- name: Run Sonar Scan
run: |
REPO_NAME=${{ gitea.event.repository.name }}
sonar-scanner \
-Dsonar.projectKey=$REPO_NAME \
-Dsonar.projectName=$REPO_NAME \
-Dsonar.sources=. \
-Dsonar.host.url=${{ secrets.SONARQUBE_HOST }} \
-Dsonar.token=${{ secrets.SONARQUBE_TOKEN }} \
-Dsonar.exclusions=node_modules/**,dist/**,coverage/** \
-Dsonar.qualitygate.wait=true