deploy.yml

name: Deploy to VPS

on:
  push:
    branches: [main]

concurrency:
  group: deploy
  cancel-in-progress: false

jobs:
  deploy:
    runs-on: ubuntu-latest
    timeout-minutes: 20
    steps:
      - name: Checkout source
        uses: actions/checkout@v5

      - name: Upload clean release
        uses: appleboy/scp-action@v1
        with:
          host: ${{ secrets.VPS_HOST }}
          username: ${{ secrets.VPS_USER }}
          key: ${{ secrets.VPS_SSH_KEY }}
          port: 443
          timeout: 60s
          command_timeout: 5m
          source: "Dockerfile,docker-compose.yml,.dockerignore,package.json,package-lock.json,next.config.ts,tsconfig.json,postcss.config.mjs,eslint.config.mjs,public,src"
          target: /tmp/7uanf-release
          rm: true
          overwrite: true

      - name: Deploy via SSH
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.VPS_HOST }}
          username: ${{ secrets.VPS_USER }}
          key: ${{ secrets.VPS_SSH_KEY }}
          port: 443
          timeout: 60s
          command_timeout: 15m
          script: |
            set -Eeuo pipefail

            RELEASE_ROOT=/tmp/7uanf-release
            COMPOSE_PROJECT=7uanf
            IMAGE_NAME=7uanf-web:latest
            ROLLBACK_IMAGE=7uanf-web:rollback

            cd "$RELEASE_ROOT"

            docker compose -p "$COMPOSE_PROJECT" config --quiet

            # Preserve the currently running image for an automatic rollback.
            if docker image inspect "$IMAGE_NAME" >/dev/null 2>&1; then
              docker image tag "$IMAGE_NAME" "$ROLLBACK_IMAGE"
            fi

            docker compose -p "$COMPOSE_PROJECT" build
            docker compose -p "$COMPOSE_PROJECT" up -d --force-recreate --remove-orphans

            echo "Waiting for health check..."
            healthy=false
            for i in $(seq 1 45); do
              if curl --fail --silent --show-error http://127.0.0.1:3002/api/health >/dev/null; then
                healthy=true
                break
              fi
              sleep 2
            done

            if [ "$healthy" != true ]; then
              echo "Health check failed. Rolling back..."
              docker compose -p "$COMPOSE_PROJECT" logs --tail=80

              if docker image inspect "$ROLLBACK_IMAGE" >/dev/null 2>&1; then
                docker image tag "$ROLLBACK_IMAGE" "$IMAGE_NAME"
                docker compose -p "$COMPOSE_PROJECT" up -d --force-recreate --no-build
                curl --retry 15 --retry-delay 2 --retry-connrefused --fail \
                  http://127.0.0.1:3002/api/health >/dev/null
                echo "Rollback completed successfully."
              fi
              exit 1
            fi

            echo "App is healthy."

            docker image rm "$ROLLBACK_IMAGE" >/dev/null 2>&1 || true

            # Keep disk usage bounded without touching active images or volumes.
            docker image prune -f
            docker builder prune -f --filter "until=168h"
            df -h /