feat: extract Directus sync/branding and optimize Gitea CI with Next.js lint support

2026-02-03 01:28:36 +01:00
parent c9db75c945
commit cc3ec8f0c2
9 changed files with 223 additions and 56 deletions
--- a/packages/infra/gitea/deploy-action.yml
+++ b/packages/infra/gitea/deploy-action.yml
@@ -39,17 +39,23 @@ jobs:
      short_sha:        ${{ steps.determine.outputs.short_sha }}
      commit_msg:       ${{ steps.determine.outputs.commit_msg }}
    steps:
+      - name: 🧹 Maintenance (High Density Cleanup)
+        shell: bash
+        run: |
+          echo "Purging old build layers and dangling images..."
+          docker image prune -f
+          docker builder prune -f --filter "until=6h"
+
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
-          fetch-depth: 0
+          fetch-depth: 2

      - name: 🔍 Environment & Version ermitteln
        id: determine
        run: |
          TAG="${{ github.ref_name }}"
-          SHORT_SHA="${{ github.sha }}"
-          SHORT_SHA="${SHORT_SHA:0:9}"
+          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-9)
          COMMIT_MSG=$(git log -1 --pretty=%s || echo "No commit message available")
          
          # Base Domain (e.g. example.com)
@@ -79,7 +85,6 @@ jobs:
              TARGET="production"
              IMAGE_TAG="$TAG"
              ENV_FILE=".env.prod"
-              TRAEFIK_HOST="\${DOMAIN_BASE}, www.\${DOMAIN_BASE}" # Note: Host() backticks usually needed in compose
              TRAEFIK_HOST="\`\${DOMAIN_BASE}\`, \`www.\${DOMAIN_BASE}\`"
              NEXT_PUBLIC_BASE_URL="https://\${DOMAIN_BASE}"
              DIRECTUS_URL="https://cms.\${DOMAIN_BASE}"
@@ -88,7 +93,7 @@ jobs:
              IS_PROD="true"
              GOTIFY_TITLE="🚀 Production-Release"
              GOTIFY_PRIORITY=6
-            elif [[ "$TAG" =~ -rc\. || "$TAG" =~ -beta\. || "$TAG" =~ -alpha\. ]]; then
+            elif [[ "$TAG" =~ -rc || "$TAG" =~ -beta || "$TAG" =~ -alpha ]]; then
              TARGET="staging"
              IMAGE_TAG="$TAG"
              ENV_FILE=".env.staging"
@@ -107,19 +112,21 @@ jobs:
            TARGET="skip"
          fi

-          echo "target=$TARGET" >> $GITHUB_OUTPUT
-          echo "image_tag=$IMAGE_TAG" >> $GITHUB_OUTPUT
-          echo "env_file=$ENV_FILE" >> $GITHUB_OUTPUT
-          echo "traefik_host=$TRAEFIK_HOST" >> $GITHUB_OUTPUT
-          echo "next_public_base_url=$NEXT_PUBLIC_BASE_URL" >> $GITHUB_OUTPUT
-          echo "directus_url=$DIRECTUS_URL" >> $GITHUB_OUTPUT
-          echo "directus_host=$DIRECTUS_HOST" >> $GITHUB_OUTPUT
-          echo "project_name=$PROJECT_NAME" >> $GITHUB_OUTPUT
-          echo "is_prod=$IS_PROD" >> $GITHUB_OUTPUT
-          echo "gotify_title=$GOTIFY_TITLE" >> $GITHUB_OUTPUT
-          echo "gotify_priority=$GOTIFY_PRIORITY" >> $GITHUB_OUTPUT
-          echo "short_sha=$SHORT_SHA" >> $GITHUB_OUTPUT
-          echo "commit_msg=$COMMIT_MSG" >> $GITHUB_OUTPUT
+          {
+            echo "target=$TARGET"
+            echo "image_tag=$IMAGE_TAG"
+            echo "env_file=$ENV_FILE"
+            echo "traefik_host=$TRAEFIK_HOST"
+            echo "next_public_base_url=$NEXT_PUBLIC_BASE_URL"
+            echo "directus_url=$DIRECTUS_URL"
+            echo "directus_host=$DIRECTUS_HOST"
+            echo "project_name=$PROJECT_NAME"
+            echo "is_prod=$IS_PROD"
+            echo "gotify_title=$GOTIFY_TITLE"
+            echo "gotify_priority=$GOTIFY_PRIORITY"
+            echo "short_sha=$SHORT_SHA"
+            echo "commit_msg=$COMMIT_MSG"
+          } >> "$GITHUB_OUTPUT"

  # ──────────────────────────────────────────────────────────────────────────────
  # JOB 2: Quality Assurance (Lint & Test)
@@ -142,12 +149,19 @@ jobs:
      - name: Install dependencies
        run: npm ci

-      - name: 🧪 Run Checks
+      - name: 🧪 Run Checks in Parallel
        if: github.event.inputs.skip_long_checks != 'true'
        run: |
-          npm run lint
-          npm run typecheck
-          npm run test
+          npm run lint &
+          LINT_PID=$!
+          npm run typecheck &
+          TYPE_PID=$!
+          npm run test &
+          TEST_PID=$!
+
+          wait $LINT_PID || exit 1
+          wait $TYPE_PID || exit 1
+          wait $TEST_PID || exit 1

  # ──────────────────────────────────────────────────────────────────────────────
  # JOB 3: Build & Push
@@ -161,6 +175,9 @@ jobs:
      - name: Checkout repository
        uses: actions/checkout@v4

+      - name: 🐳 Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
      - name: 🔐 Registry Login
        run: |
          echo "${{ secrets.REGISTRY_PASS }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin
@@ -174,7 +191,10 @@ jobs:
            --pull \
            --platform linux/arm64 \
            --build-arg NEXT_PUBLIC_BASE_URL="$NEXT_PUBLIC_BASE_URL" \
+            --build-arg NEXT_PUBLIC_TARGET="${{ needs.prepare.outputs.target }}" \
            -t registry.infra.mintel.me/mintel/${{ github.event.repository.name }}:$IMAGE_TAG \
+            --cache-from type=registry,ref=registry.infra.mintel.me/mintel/${{ github.event.repository.name }}:buildcache \
+            --cache-to type=registry,ref=registry.infra.mintel.me/mintel/${{ github.event.repository.name }}:buildcache,mode=max \
            --push .

  # ──────────────────────────────────────────────────────────────────────────────
@@ -187,16 +207,14 @@ jobs:
    runs-on: docker
    env:
      TARGET: ${{ needs.prepare.outputs.target }}
+      IMAGE_TAG: ${{ needs.prepare.outputs.image_tag }}
+      PROJECT_NAME: ${{ needs.prepare.outputs.project_name }}
+      ENV_FILE: ${{ needs.prepare.outputs.env_file }}
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: 🚀 Deploy via SSH
-        env:
-          IMAGE_TAG: ${{ needs.prepare.outputs.image_tag }}
-          ENV_FILE: ${{ needs.prepare.outputs.env_file }}
-          TRAEFIK_HOST: ${{ needs.prepare.outputs.traefik_host }}
-          PROJECT_NAME: ${{ needs.prepare.outputs.project_name }}
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.SSH_KEY }}" > ~/.ssh/id_ed25519
@@ -208,12 +226,13 @@ jobs:
          # Generated by CI - $TARGET - $(date -u)
          NODE_ENV=production
          IMAGE_TAG=$IMAGE_TAG
-          TRAEFIK_HOST=$TRAEFIK_HOST
+          TRAEFIK_HOST=${{ needs.prepare.outputs.traefik_host }}
          PROJECT_NAME=$PROJECT_NAME
          ENV_FILE=$ENV_FILE
          
          # App Config
          NEXT_PUBLIC_BASE_URL=${{ needs.prepare.outputs.next_public_base_url }}
+          NEXT_PUBLIC_TARGET=$TARGET
          
          # Directus Config
          DIRECTUS_URL=${{ needs.prepare.outputs.directus_url }}
@@ -237,10 +256,11 @@ jobs:
          ssh root@${{ secrets.SSH_HOST }} IMAGE_TAG="$IMAGE_TAG" ENV_FILE="$ENV_FILE" PROJECT_NAME="$PROJECT_NAME" bash << 'EOF'
            set -e
            cd "/home/deploy/sites/${{ github.event.repository.name }}"
+            chmod 600 "$ENV_FILE"
            echo "${{ secrets.REGISTRY_PASS }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin
            docker compose -p "$PROJECT_NAME" --env-file "$ENV_FILE" pull
            docker compose -p "$PROJECT_NAME" --env-file "$ENV_FILE" up -d --remove-orphans
-            docker system prune -f --filter "until=168h"
+            docker system prune -f --filter "until=24h"
          EOF

  # ──────────────────────────────────────────────────────────────────────────────
@@ -252,10 +272,22 @@ jobs:
    if: always()
    runs-on: docker
    steps:
-      - name: 🔔 Gotify
+      - name: 🔔 Gotify - Success
        if: needs.deploy.result == 'success'
        run: |
          curl -s -k -X POST "${{ secrets.GOTIFY_URL }}/message?token=${{ secrets.GOTIFY_TOKEN }}" \
            -F "title=${{ needs.prepare.outputs.gotify_title }}" \
-            -F "message=Erfolgreich deployt auf **${{ needs.prepare.outputs.target }}**" \
+            -F "message=Erfolgreich deployt auf **${{ needs.prepare.outputs.target }}**\n\nVersion: **${{ needs.prepare.outputs.image_tag }}**\nCommit: ${{ needs.prepare.outputs.short_sha }}\nRun: ${{ github.run_id }}" \
            -F "priority=4" || true
+
+      - name: 🔔 Gotify - Failure
+        if: |
+          needs.prepare.result == 'failure' ||
+          needs.qa.result == 'failure' ||
+          needs.build.result == 'failure' ||
+          needs.deploy.result == 'failure'
+        run: |
+          curl -s -k -X POST "${{ secrets.GOTIFY_URL }}/message?token=${{ secrets.GOTIFY_TOKEN }}" \
+            -F "title=❌ Deployment FEHLGESCHLAGEN – ${{ github.event.repository.name }}" \
+            -F "message=**Fehler beim Deploy auf ${{ needs.prepare.outputs.target || 'unknown' }}**\n\nRun: ${{ github.run_id }}\nBitte Logs prüfen!" \
+            -F "priority=8" || true