feat: try new ci/cd blue and green

.gitea/workflows/deploy.yml

@@ -53,9 +53,10 @@ jobs:
 
       - name: Build Docker image
         run: |
-          IMAGE=$REGISTRY/$IMAGE_NAME:latest
-          docker build -t $IMAGE .
-          docker push $IMAGE
+          IMAGE=$REGISTRY/$IMAGE_NAME
+          docker build -t "$IMAGE:${{ github.sha }}" -t "$IMAGE:latest" .
+          docker push "$IMAGE:${{ github.sha }}"
+          docker push "$IMAGE:latest"
 
 
   # =========================
@@ -69,28 +70,119 @@ jobs:
     steps:
       - name: Deploy via SSH (Blue/Green)
         uses: appleboy/ssh-action@v1.0.3
+        env:
+          IMAGE_TAG: ${{ github.sha }}
+          DEPLOY_PATH: ${{ secrets.DEPLOY_PATH }}
+          REGISTRY_USERNAME: ${{ github.actor }}
+          REGISTRY_PASSWORD: ${{ secrets.TOKEN_GITEA }}
         with:
           host: ${{ secrets.SSH_HOST }}
           username: ${{ secrets.SSH_USER }}
           key: ${{ secrets.SSH_PRIVATE_KEY }}
+          envs: REGISTRY,IMAGE_NAME,IMAGE_TAG,DEPLOY_PATH,REGISTRY_USERNAME,REGISTRY_PASSWORD
           script: |
-            set -e
+            set -eu
 
-            echo "📦 Pull latest image"
-            docker pull gitea.leonmorival.com/daily_meal/bemeal-api:latest
+            APP_DIR="${DEPLOY_PATH:-/opt/bemeal}"
+            COMPOSE_FILE="docker-compose.prod.yml"
+            COMPOSE_ENV_FILE=".env.prod"
+            UPSTREAM_FILE="/etc/nginx/conf.d/bemeal-upstream.inc"
+            DRAIN_SECONDS="${DRAIN_SECONDS:-20}"
 
-            echo "🟢 Start GREEN container"
-            docker compose up -d bemeal-api-green
+            if [ "$(id -u)" -eq 0 ]; then
+              SUDO=""
+            else
+              SUDO="sudo"
+            fi
 
-            echo "⏳ Wait for healthcheck"
-            sleep 10
+            cd "$APP_DIR"
 
-            curl -f http://localhost/api/health || exit 1
+            if [ -n "${REGISTRY_PASSWORD:-}" ]; then
+              echo "$REGISTRY_PASSWORD" | docker login "$REGISTRY" -u "$REGISTRY_USERNAME" --password-stdin
+            fi
 
-            echo "🔁 Switch traffic (MANUAL STEP OR NPM API)"
-            sed -i 's/blue/green/g' /etc/nginx/conf.d/bemeal.conf
-            nginx -s reload
+            if [ -f "$COMPOSE_ENV_FILE" ]; then
+              COMPOSE="docker compose --env-file $COMPOSE_ENV_FILE -f $COMPOSE_FILE"
+            else
+              COMPOSE="docker compose -f $COMPOSE_FILE"
+            fi
 
-            echo "🧹 Stop BLUE container"
-            docker stop bemeal-api-blue || true
-            docker rm bemeal-api-blue || true
+            IMAGE="$REGISTRY/$IMAGE_NAME:$IMAGE_TAG"
+            export IMAGE_TAG
+
+            echo "Pull image $IMAGE"
+            docker pull "$IMAGE"
+
+            echo "Ensure shared services are running"
+            $COMPOSE up -d pgsql redis meilisearch
+
+            ACTIVE=""
+            if grep -q "127.0.0.1:8081" "$UPSTREAM_FILE" 2>/dev/null; then
+              ACTIVE="blue"
+            elif grep -q "127.0.0.1:8082" "$UPSTREAM_FILE" 2>/dev/null; then
+              ACTIVE="green"
+            fi
+
+            if [ "$ACTIVE" = "blue" ]; then
+              TARGET="green"
+              TARGET_PORT="8082"
+            else
+              TARGET="blue"
+              TARGET_PORT="8081"
+            fi
+
+            TARGET_SERVICE="bemeal-api-$TARGET"
+
+            echo "Start $TARGET_SERVICE"
+            $COMPOSE up -d --force-recreate --no-deps "$TARGET_SERVICE"
+
+            echo "Wait for $TARGET_SERVICE healthcheck"
+            HEALTH_STATUS=""
+            for attempt in $(seq 1 60); do
+              HEALTH_STATUS="$(docker inspect --format='{{if .State.Health}}{{.State.Health.Status}}{{else}}{{.State.Status}}{{end}}' "$TARGET_SERVICE" 2>/dev/null || true)"
+
+              if [ "$HEALTH_STATUS" = "healthy" ]; then
+                break
+              fi
+
+              sleep 2
+            done
+
+            if [ "$HEALTH_STATUS" != "healthy" ]; then
+              docker logs --tail=200 "$TARGET_SERVICE" || true
+              exit 1
+            fi
+
+            curl -fsS "http://127.0.0.1:$TARGET_PORT/api/health" >/dev/null
+
+            if [ -f "$UPSTREAM_FILE" ]; then
+              $SUDO cp "$UPSTREAM_FILE" "$UPSTREAM_FILE.bak"
+            fi
+
+            printf '%s\n' \
+              'upstream bemeal_api {' \
+              "    server 127.0.0.1:$TARGET_PORT max_fails=3 fail_timeout=10s;" \
+              '    keepalive 32;' \
+              '}' | $SUDO tee "$UPSTREAM_FILE" >/dev/null
+
+            if ! $SUDO nginx -t; then
+              if [ -f "$UPSTREAM_FILE.bak" ]; then
+                $SUDO mv "$UPSTREAM_FILE.bak" "$UPSTREAM_FILE"
+              fi
+
+              exit 1
+            fi
+
+            echo "Switch Nginx traffic to $TARGET"
+            $SUDO nginx -s reload
+            $SUDO rm -f "$UPSTREAM_FILE.bak"
+
+            echo "Restart workers on the new image"
+            $COMPOSE up -d --force-recreate --no-deps horizon scheduler
+
+            if [ -n "$ACTIVE" ] && [ "$ACTIVE" != "$TARGET" ]; then
+              echo "Drain old $ACTIVE service for $DRAIN_SECONDS seconds"
+              sleep "$DRAIN_SECONDS"
+              $COMPOSE stop "bemeal-api-$ACTIVE" || true
+              $COMPOSE rm -f "bemeal-api-$ACTIVE" || true
+            fi