feat: Integrate Directus CMS, add i18n with next-intl, and configure project tooling with pnpm, husky, and commitlint.**

.gitea/workflows/deploy.yml

@@ -1,280 +1,169 @@
-name: Build & Deploy MB Grid Solutions
+name: Build & Deploy
 
 on:
   push:
-    branches: [main]
+    branches:
+      - main
+    tags:
+      - 'v*'
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: false
 
 jobs:
-  build-and-deploy:
-    # ────────────────────────────────────────────────
-    # WICHTIG: Kein "docker" mehr – sondern eines der neuen Labels
+  prepare:
+    name: 🔍 Prepare Environment
     runs-on: docker
-
+    outputs:
+      target:           ${{ steps.determine.outputs.target }}
+      image_tag:        ${{ steps.determine.outputs.image_tag }}
+      env_file:         ${{ steps.determine.outputs.env_file }}
+      traefik_host:     ${{ steps.determine.outputs.traefik_host }}
+      next_public_base_url: ${{ steps.determine.outputs.next_public_base_url }}
+      directus_url:     ${{ steps.determine.outputs.directus_url }}
+      directus_host:    ${{ steps.determine.outputs.directus_host }}
+      project_name:     ${{ steps.determine.outputs.project_name }}
     steps:
-      # ═══════════════════════════════════════════════════════════════════════════════
-      # LOGGING: Workflow Start - Full Transparency
-      # ═══════════════════════════════════════════════════════════════════════════════
-      - name: 📋 Log Workflow Start
-        run: |
-          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
-          echo "║ MB Grid Solutions Deployment Workflow Started                               ║"
-          echo "╚══════════════════════════════════════════════════════════════════════════════╝"
-          echo ""
-          echo "📋 Workflow Information:"
-          echo "  • Repository: ${{ github.repository }}"
-          echo "  • Branch: ${{ github.ref }}"
-          echo "  • Commit: ${{ github.sha }}"
-          echo "  • Actor: ${{ github.actor }}"
-          echo "  • Run ID: ${{ github.run_id }}"
-          echo "  • Timestamp: $(date -u +'%Y-%m-%d %H:%M:%S UTC')"
-          echo ""
-          echo "🔍 Environment Details:"
-          echo "  • Runner OS: ${{ runner.os }}"
-          echo "  • Workspace: ${{ github.workspace }}"
-          echo ""
-
       - name: Checkout repository
         uses: actions/checkout@v4
+        with:
+          fetch-depth: 2
 
-      # ═══════════════════════════════════════════════════════════════════════════════
-      # LOGGING: Registry Login Phase
-      # ═══════════════════════════════════════════════════════════════════════════════
-      - name: 🔐 Login to private registry
+      - name: 🔍 Determine Environment
+        id: determine
         run: |
-          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
-          echo "║ Step: Registry Login                                                         ║"
-          echo "╚══════════════════════════════════════════════════════════════════════════════╝"
-          echo ""
-          echo "🔐 Authenticating with private registry..."
-          echo "  Registry: registry.infra.mintel.me"
-          echo "  User: ${{ secrets.REGISTRY_USER != '' && '***' || 'NOT SET' }}"
-          echo ""
-          
-          # Execute login with error handling
-          if echo "${{ secrets.REGISTRY_PASS }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin 2>&1; then
-            echo "✅ Registry login successful"
-          else
-            echo "❌ Registry login failed"
-            exit 1
-          fi
-          echo ""
+          TAG="${{ github.ref_name }}"
+          SHORT_SHA=$(echo "${{ github.sha }}" | cut -c1-7)
+          DOMAIN_BASE="mb-grid-solutions.com"
+          PRJ_ID="mb-grid-solutions"
 
-      # ═══════════════════════════════════════════════════════════════════════════════
-      # LOGGING: Build Phase
-      # ═══════════════════════════════════════════════════════════════════════════════
-      - name: 🏗️ Build Docker image
+          if [[ "${{ github.ref_type }}" == "branch" && "$TAG" == "main" ]]; then
+            TARGET="staging"
+            IMAGE_TAG="staging-${SHORT_SHA}"
+            ENV_FILE=".env.staging"
+            TRAEFIK_HOST="\`staging.${DOMAIN_BASE}\`"
+            NEXT_PUBLIC_BASE_URL="https://staging.${DOMAIN_BASE}"
+            DIRECTUS_URL="https://cms.staging.${DOMAIN_BASE}"
+            DIRECTUS_HOST="\`cms.staging.${DOMAIN_BASE}\`"
+          elif [[ "${{ github.ref_type }}" == "tag" ]]; then
+            TARGET="production"
+            IMAGE_TAG="$TAG"
+            ENV_FILE=".env.prod"
+            TRAEFIK_HOST="\`${DOMAIN_BASE}\`, \`www.${DOMAIN_BASE}\`"
+            NEXT_PUBLIC_BASE_URL="https://${DOMAIN_BASE}"
+            DIRECTUS_URL="https://cms.${DOMAIN_BASE}"
+            DIRECTUS_HOST="\`cms.${DOMAIN_BASE}\`"
+          else
+            TARGET="skip"
+          fi
+
+          echo "target=$TARGET" >> "$GITHUB_OUTPUT"
+          echo "image_tag=$IMAGE_TAG" >> "$GITHUB_OUTPUT"
+          echo "env_file=$ENV_FILE" >> "$GITHUB_OUTPUT"
+          echo "traefik_host=$TRAEFIK_HOST" >> "$GITHUB_OUTPUT"
+          echo "next_public_base_url=$NEXT_PUBLIC_BASE_URL" >> "$GITHUB_OUTPUT"
+          echo "directus_url=$DIRECTUS_URL" >> "$GITHUB_OUTPUT"
+          echo "directus_host=$DIRECTUS_HOST" >> "$GITHUB_OUTPUT"
+          echo "project_name=$PRJ_ID-$TARGET" >> "$GITHUB_OUTPUT"
+
+  qa:
+    name: 🧪 QA
+    needs: prepare
+    if: needs.prepare.outputs.target != 'skip'
+    runs-on: docker
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'pnpm'
+      - run: pnpm install --frozen-lockfile
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - run: pnpm lint
+      - run: pnpm build
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NEXT_PUBLIC_BASE_URL: https://dummy.test
+
+  build:
+    name: 🏗️ Build
+    needs: prepare
+    if: needs.prepare.outputs.target != 'skip'
+    runs-on: docker
+    steps:
+      - uses: actions/checkout@v4
+      - name: 🔐 Registry Login
+        run: echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
+      
+      - name: 🏗️ Build and Push
         run: |
-          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
-          echo "║ Step: Build Docker Image                                                     ║"
-          echo "╚══════════════════════════════════════════════════════════════════════════════╝"
-          echo ""
-          echo "🏗️ Building Docker image with buildx..."
-          echo "  Platform: linux/arm64"
-          echo "  Target: registry.infra.mintel.me/mintel/mb-grid-solutions:latest"
-          echo ""
-          echo "⏱️ Build started at: $(date -u +'%Y-%m-%d %H:%M:%S UTC')"
-          echo ""
-          
-          # Execute build with detailed logging
-          set -e
-          docker buildx build \
-            --pull \
-            --platform linux/arm64 \
-            --build-arg NEXT_PUBLIC_BASE_URL="${{ secrets.NEXT_PUBLIC_BASE_URL }}" \
-            --build-arg NEXT_PUBLIC_UMAMI_WEBSITE_ID="${{ secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}" \
-            --build-arg NEXT_PUBLIC_UMAMI_SCRIPT_URL="${{ secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL }}" \
-            -t registry.infra.mintel.me/mintel/mb-grid-solutions:latest \
-            --push .
-          
-          BUILD_EXIT_CODE=$?
-          if [ $BUILD_EXIT_CODE -eq 0 ]; then
-            echo ""
-            echo "✅ Build completed successfully at: $(date -u +'%Y-%m-%d %H:%M:%S UTC')"
-            echo ""
-            echo "📊 Image Details:"
-            IMAGE_SIZE=$(docker inspect registry.infra.mintel.me/mintel/mb-grid-solutions:latest --format='{{.Size}}')
-            IMAGE_SIZE_MB=$((IMAGE_SIZE / 1024 / 1024))
-            echo "  • Size: ${IMAGE_SIZE_MB}MB"
-            docker inspect registry.infra.mintel.me/mintel/mb-grid-solutions:latest --format='  • Created: {{.Created}}'
-            docker inspect registry.infra.mintel.me/mintel/mb-grid-solutions:latest --format='  • Architecture: {{.Architecture}}'
-          else
-            echo ""
-            echo "❌ Build failed with exit code: $BUILD_EXIT_CODE"
-            exit $BUILD_EXIT_CODE
-          fi
-          echo ""
+          docker build \
+            --build-arg NPM_TOKEN=${{ secrets.NPM_TOKEN }} \
+            --build-arg NEXT_PUBLIC_BASE_URL=${{ needs.prepare.outputs.next_public_base_url }} \
+            --build-arg DIRECTUS_URL=${{ needs.prepare.outputs.directus_url }} \
+            -t registry.infra.mintel.me/mintel/mb-grid-solutions:${{ needs.prepare.outputs.image_tag }} .
+          docker push registry.infra.mintel.me/mintel/mb-grid-solutions:${{ needs.prepare.outputs.image_tag }}
 
-      # ═══════════════════════════════════════════════════════════════════════════════
-      # LOGGING: Deployment Phase
-      # ═══════════════════════════════════════════════════════════════════════════════
-      - name: 🚀 Deploy to production server
-        run: |
-          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
-          echo "║ Step: Deploy to Production Server                                            ║"
-          echo "╚══════════════════════════════════════════════════════════════════════════════╝"
-          echo ""
-          echo "🚀 Starting deployment process..."
-          echo "  Target Server: alpha.mintel.me"
-          echo "  Deploy User: deploy (via sudo from root)"
-          echo "  Target Path: /home/deploy/sites/mb-grid-solutions.com"
-          echo ""
-          
-          # Setup SSH with logging
-          echo "🔐 Setting up SSH connection..."
-          mkdir -p ~/.ssh
-          echo "${{ secrets.ALPHA_SSH_KEY }}" > ~/.ssh/id_ed25519
-          chmod 600 ~/.ssh/id_ed25519
-          
-          echo "🔑 Adding host to known_hosts..."
-          ssh-keyscan -H alpha.mintel.me >> ~/.ssh/known_hosts 2>/dev/null
-          if [ $? -eq 0 ]; then
-            echo "✅ Host key added successfully"
-          else
-            echo "⚠️ Warning: Could not add host key"
-          fi
-          echo ""
-          
-          # Sync docker-compose.yaml first
-          echo "📦 Syncing docker-compose.yaml..."
-          tar czf - docker-compose.yaml | \
-          ssh -o StrictHostKeyChecking=accept-new \
-              -o IPQoS=0x00 \
-              root@alpha.mintel.me \
-              "mkdir -p /home/deploy/sites/mb-grid-solutions.com/ && tar xzf - -C /home/deploy/sites/mb-grid-solutions.com/ && chown -R deploy:deploy /home/deploy/sites/mb-grid-solutions.com/"
-          
-          if [ $? -eq 0 ]; then
-            echo "✅ Files synced successfully"
-          else
-            echo "❌ File sync failed"
-            exit 1
-          fi
-          echo ""
-
-          # Execute deployment commands with detailed logging
-          echo "📡 Connecting to server and executing deployment commands..."
-          echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-          echo ""
-          
-          # SSH as root and use sudo to run deployment script as deploy user
-          # This works around the broken SSH output issue with deploy user
-          ssh -o StrictHostKeyChecking=accept-new \
-              -o ServerAliveInterval=30 \
-              -o ServerAliveCountMax=3 \
-              -o ConnectTimeout=10 \
-              root@alpha.mintel.me \
-              "CONTACT_RECIPIENT='${{ secrets.CONTACT_RECIPIENT }}' \
-               SMTP_FROM='${{ secrets.SMTP_FROM }}' \
-               SMTP_HOST='${{ secrets.SMTP_HOST }}' \
-               SMTP_PASS='${{ secrets.SMTP_PASS }}' \
-               SMTP_PORT='${{ secrets.SMTP_PORT }}' \
-               SMTP_SECURE='${{ secrets.SMTP_SECURE }}' \
-               SMTP_USER='${{ secrets.SMTP_USER }}' \
-               NEXT_PUBLIC_BASE_URL='${{ secrets.NEXT_PUBLIC_BASE_URL }}' \
-               NEXT_PUBLIC_UMAMI_WEBSITE_ID='${{ secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}' \
-               NEXT_PUBLIC_UMAMI_SCRIPT_URL='${{ secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL }}' \
-               SENTRY_DSN='${{ secrets.SENTRY_DSN }}' \
-               SITE_NAME='mb-grid-solutions.com' \
-               sudo -u deploy -E HOME=/home/deploy /home/deploy/deploy.sh --zero-downtime"
-          
-          DEPLOY_EXIT_CODE=$?
-          echo ""
-          
-          if [ $DEPLOY_EXIT_CODE -eq 0 ]; then
-            echo "✅ Deployment completed successfully at: $(date -u +'%Y-%m-%d %H:%M:%S UTC')"
-          else
-            echo "❌ Deployment failed with exit code: $DEPLOY_EXIT_CODE"
-            echo ""
-            echo "🔍 Troubleshooting Tips:"
-            echo "  • Check server connectivity: ping alpha.mintel.me"
-            echo "  • Verify SSH key permissions on server"
-            echo "  • Check disk space on target server"
-            echo "  • Review docker compose configuration"
-            echo "  • Ensure /home/deploy/deploy.sh exists and is executable"
-            exit $DEPLOY_EXIT_CODE
-          fi
-          echo ""
-
-      # ═══════════════════════════════════════════════════════════════════════════════
-      # LOGGING: Workflow Summary
-      # ═══════════════════════════════════════════════════════════════════════════════
-      - name: 📊 Workflow Summary
-        if: always()
-        run: |
-          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
-          echo "║ Workflow Summary                                                             ║"
-          echo "╚══════════════════════════════════════════════════════════════════════════════╝"
-          echo ""
-          echo "📊 Final Status:"
-          echo "  • Workflow: ${{ job.status }}"
-          echo "  • Completed: $(date -u +'%Y-%m-%d %H:%M:%S UTC')"
-          echo ""
-          echo "🎯 Deployment Target:"
-          echo "  • Image: registry.infra.mintel.me/mintel/mb-grid-solutions:latest"
-          echo "  • Server: alpha.mintel.me"
-          echo "  • Service: mb-grid-solutions.com"
-          echo ""
-          echo "🔐 Security Notes:"
-          echo "  • All secrets are masked (*** ) in logs"
-          echo "  • SSH keys are created with 600 permissions"
-          echo "  • Passwords are never displayed in plain text"
-          echo ""
-          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
-          if [ "${{ job.status }}" == "success" ]; then
-            echo "║ ✅ DEPLOYMENT SUCCESSFUL                                                     ║"
-          else
-            echo "║ ❌ DEPLOYMENT FAILED                                                         ║"
-          fi
-          echo "╚══════════════════════════════════════════════════════════════════════════════╝"
-
-      # ═══════════════════════════════════════════════════════════════════════════════
-      # NOTIFICATION: Gotify
-      # ═══════════════════════════════════════════════════════════════════════════════
-      - name: 🔔 Gotify Notification (Success)
-        if: success()
-        run: |
-          echo "Sending success notification to Gotify..."
-          RESPONSE=$(curl -k -s -w "\n%{http_code}" -X POST "${{ secrets.GOTIFY_URL }}/message?token=${{ secrets.GOTIFY_TOKEN }}" \
-            -F "title=✅ Deployment Success: ${{ github.repository }}" \
-            -F "message=The deployment of ${{ github.repository }} (branch: ${{ github.ref }}) was successful.
+  deploy:
+    name: 🚀 Deploy
+    needs: [prepare, build, qa]
+    if: needs.prepare.outputs.target != 'skip'
+    runs-on: docker
+    steps:
+      - name: 🚀 Deploy via SSH
+        uses: appleboy/ssh-action@master
+        with:
+          host: ${{ secrets.SSH_HOST }}
+          username: root
+          key: ${{ secrets.SSH_PRIVATE_KEY }}
+          script: |
+            APP_DIR="/home/deploy/sites/mb-grid-solutions.com"
+            mkdir -p $APP_DIR
+            cd $APP_DIR
             
-            Commit: ${{ github.sha }}
-            Actor: ${{ github.actor }}
-            Run ID: ${{ github.run_id }}" \
-            -F "priority=5")
-          
-          HTTP_CODE=$(echo "$RESPONSE" | tail -n1)
-          BODY=$(echo "$RESPONSE" | sed '$d')
-          
-          echo "HTTP Status: $HTTP_CODE"
-          echo "Response Body: $BODY"
-          
-          if [ "$HTTP_CODE" -lt 200 ] || [ "$HTTP_CODE" -ge 300 ]; then
-            echo "Failed to send Gotify notification"
-            exit 0 # Don't fail the workflow because of notification failure
-          fi
+            # Update Environment
+            cat > ${{ needs.prepare.outputs.env_file }} << EOF
+            IMAGE_TAG=${{ needs.prepare.outputs.image_tag }}
+            TRAEFIK_HOST=${{ needs.prepare.outputs.traefik_host }}
+            PROJECT_NAME=${{ needs.prepare.outputs.project_name }}
+            NEXT_PUBLIC_BASE_URL=${{ needs.prepare.outputs.next_public_base_url }}
+            
+            # Directus
+            DIRECTUS_URL=${{ needs.prepare.outputs.directus_url }}
+            DIRECTUS_HOST=${{ needs.prepare.outputs.directus_host }}
+            DIRECTUS_API_TOKEN=${{ secrets.DIRECTUS_API_TOKEN }}
+            DIRECTUS_ADMIN_EMAIL=${{ secrets.DIRECTUS_ADMIN_EMAIL || 'admin@mintel.me' }}
+            DIRECTUS_ADMIN_PASSWORD=${{ secrets.DIRECTUS_ADMIN_PASSWORD }}
+            DIRECTUS_DB_NAME=${{ secrets.DIRECTUS_DB_NAME || 'directus' }}
+            DIRECTUS_DB_USER=${{ secrets.DIRECTUS_DB_USER || 'directus' }}
+            DIRECTUS_DB_PASSWORD=${{ secrets.DIRECTUS_DB_PASSWORD }}
+            DIRECTUS_KEY=${{ secrets.DIRECTUS_KEY }}
+            DIRECTUS_SECRET=${{ secrets.DIRECTUS_SECRET }}
+            EOF
+            
+            # Sync docker-compose
+            echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
+            docker compose -p "${{ needs.prepare.outputs.project_name }}" --env-file ${{ needs.prepare.outputs.env_file }} pull
+            docker compose -p "${{ needs.prepare.outputs.project_name }}" --env-file ${{ needs.prepare.outputs.env_file }} up -d --remove-orphans
+            docker system prune -f --filter "until=24h"
 
-      - name: 🔔 Gotify Notification (Failure)
-        if: failure()
+  notifications:
+    name: 🔔 Notifications
+    needs: [prepare, deploy]
+    if: always()
+    runs-on: docker
+    steps:
+      - name: Notify Gotify
         run: |
-          echo "Sending failure notification to Gotify..."
-          RESPONSE=$(curl -k -s -w "\n%{http_code}" -X POST "${{ secrets.GOTIFY_URL }}/message?token=${{ secrets.GOTIFY_TOKEN }}" \
-            -F "title=❌ Deployment Failed: ${{ github.repository }}" \
-            -F "message=The deployment of ${{ github.repository }} (branch: ${{ github.ref }}) failed!
-            
-            Commit: ${{ github.sha }}
-            Actor: ${{ github.actor }}
-            Run ID: ${{ github.run_id }}
-            
-            Please check the logs for details." \
-            -F "priority=8")
+          STATUS="${{ needs.deploy.result }}"
+          COLOR="info"
+          [[ "$STATUS" == "success" ]] && PRIORITY=5 || PRIORITY=8
           
-          HTTP_CODE=$(echo "$RESPONSE" | tail -n1)
-          BODY=$(echo "$RESPONSE" | sed '$d')
-          
-          echo "HTTP Status: $HTTP_CODE"
-          echo "Response Body: $BODY"
-          
-          if [ "$HTTP_CODE" -lt 200 ] || [ "$HTTP_CODE" -ge 300 ]; then
-            echo "Failed to send Gotify notification"
-            exit 0 # Don't fail the workflow because of notification failure
-          fi
+          curl -X POST "${{ secrets.GOTIFY_URL }}/message?token=${{ secrets.GOTIFY_TOKEN }}" \
+            -F "title=mb-grid-solutions Deployment" \
+            -F "message=Status: $STATUS for ${{ needs.prepare.outputs.target }} (${{ needs.prepare.outputs.image_tag }})" \
+            -F "priority=$PRIORITY"