deploy.yml

name: Deploy to Server

on:
  push:
    branches: [main]
  workflow_dispatch:
    inputs:
      environment:
        description: 'Deployment environment'
        required: true
        default: 'production'
        type: choice
        options:
        - production
        - staging
      force:
        description: 'Force deployment even if checks fail'
        required: false
        default: false
        type: boolean

jobs:
  pre-deploy-checks:
    runs-on: ubuntu-latest
    outputs:
      should_deploy: ${{ steps.check.outputs.should_deploy }}
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Run basic validation
      id: check
      run: |
        echo "Running pre-deployment checks..."
        
        # Check if this is a valid deployment commit
        if git log -1 --pretty=%B | grep -i "\[skip ci\]\|\[skip deploy\]"; then
          echo "🔄 Deployment skipped via commit message"
          echo "should_deploy=false" >> $GITHUB_OUTPUT
          exit 0
        fi
        
        # Check for critical files
        required_files=("manage.py" "requirements.txt" "deploy.sh")
        missing_files=0
        for file in "${required_files[@]}"; do
          if [ ! -f "$file" ]; then
            echo "❌ Missing required file: $file"
            missing_files=$((missing_files + 1))
          fi
        done
        
        if [ $missing_files -gt 0 ]; then
          echo "❌ Missing $missing_files required files"
          if [ "${{ github.event.inputs.force }}" = "true" ]; then
            echo "⚠️ Force deployment enabled, continuing despite missing files"
            echo "should_deploy=true" >> $GITHUB_OUTPUT
          else
            echo "should_deploy=false" >> $GITHUB_OUTPUT
            exit 1
          fi
        else
          echo "✅ All required files present"
          echo "should_deploy=true" >> $GITHUB_OUTPUT
        fi

  deploy:
    runs-on: ubuntu-latest
    needs: pre-deploy-checks
    if: needs.pre-deploy-checks.outputs.should_deploy == 'true'
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4

    - name: Determine deployment environment
      id: env
      run: |
        if [ "${{ github.event.inputs.environment }}" != "" ]; then
          ENV="${{ github.event.inputs.environment }}"
        elif [[ "${{ github.ref }}" == *"develop"* ]]; then
          ENV="staging"
        else
          ENV="production"
        fi
        echo "ENVIRONMENT=$ENV" >> $GITHUB_OUTPUT
        echo "Deploying to $ENV environment"

    - name: Setup deployment variables
      id: vars
      run: |
        if [ "${{ steps.env.outputs.ENVIRONMENT }}" = "staging" ]; then
          echo "SERVER_HOST=${{ secrets.STAGING_SERVER_IP || secrets.SERVER_IP }}" >> $GITHUB_OUTPUT
          echo "DEPLOY_BRANCH=develop" >> $GITHUB_OUTPUT
        else
          echo "SERVER_HOST=${{ secrets.SERVER_IP }}" >> $GITHUB_OUTPUT
          echo "DEPLOY_BRANCH=main" >> $GITHUB_OUTPUT
        fi

    - name: Deploy via SSH
      uses: appleboy/ssh-action@master
      with:
        host: ${{ steps.vars.outputs.SERVER_HOST }}
        username: ${{ secrets.SERVER_USER }}
        key: ${{ secrets.SSH_PRIVATE_KEY }}
        port: 2111
        script: |
          set -e
          echo "🚀 Starting deployment to ${{ steps.env.outputs.ENVIRONMENT }}"
          echo "Deployment triggered by: ${{ github.actor }}"
          echo "Commit: ${{ github.sha }}"
          echo "Branch: ${{ steps.vars.outputs.DEPLOY_BRANCH }}"
          
          cd /home/cmsuser/cms_project/
          
          # Create deployment log
          DEPLOY_LOG="logs/deploy_$(date +%Y%m%d_%H%M%S).log"
          mkdir -p logs
          exec > >(tee -a "$DEPLOY_LOG") 2>&1
          
          # Backup current deployment
          echo "📦 Creating backup..."
          BACKUP_DIR="backups/$(date +%Y%m%d_%H%M%S)"
          mkdir -p "$BACKUP_DIR"
          tar -czf "$BACKUP_DIR/backup.tar.gz" \
            --exclude=venv \
            --exclude=*.pyc \
            --exclude=__pycache__ \
            --exclude=backups \
            --exclude=logs \
            --exclude=.git \
            .
          
          # Update code
          echo "🔄 Updating code from ${{ steps.vars.outputs.DEPLOY_BRANCH }} branch..."
          git fetch origin
          git checkout ${{ steps.vars.outputs.DEPLOY_BRANCH }}
          git reset --hard origin/${{ steps.vars.outputs.DEPLOY_BRANCH }}
          
          # Update dependencies
          echo "🐍 Updating Python dependencies..."
          source venv/bin/activate
          pip install --upgrade pip
          pip install -r requirements.txt
          
          # Database migrations
          echo "🗄️ Running database migrations..."
          python manage.py migrate --noinput
          
          # Static files
          echo "📁 Collecting static files..."
          python manage.py collectstatic --noinput --clear
          
          # Security checks
          echo "🔒 Running security checks..."
          python manage.py check --deploy 2>/dev/null || echo "Security check completed"
          
          # Restart services
          echo "⚡ Restarting services..."
          if [ -f cms.service ]; then
            sudo cp cms.service /etc/systemd/system/cms.service
          fi
          sudo systemctl daemon-reload
          sudo systemctl restart cms
          sudo systemctl reload nginx
          
          # Health check
          echo "🏥 Performing health check..."
          sleep 5
          if curl --unix-socket /run/cms/cms.sock -f http://localhost/health/; then
            echo "✅ Deployment completed successfully!"
            echo "Health check passed"
          else
            echo "⚠️ Deployment completed but health check failed"
          fi
          
          # Cleanup old backups (keep last 10)
          echo "🧹 Cleaning up old backups..."
          ls -dt backups/* | tail -n +11 | xargs rm -rf 2>/dev/null || true
          
          echo "🎉 Deployment process completed at $(date)"

    - name: Send deployment notification
      if: always()
      run: |
        DEPLOYMENT_STATUS="${{ job.status }}"
        ENVIRONMENT="${{ steps.env.outputs.ENVIRONMENT }}"
        COMMIT_SHA="${{ github.sha }}"
        COMMIT_MESSAGE=$(git log -1 --pretty=%B | head -1)
        
        echo "Deployment $DEPLOYMENT_STATUS for $ENVIRONMENT"
        echo "Commit: $COMMIT_SHA"
        echo "Message: $COMMIT_MESSAGE"
        
        # This would typically send to Slack/Teams/etc
        # For now, just log it
        echo "📢 Notification: Deployment to $ENVIRONMENT $DEPLOYMENT_STATUS"

  post-deploy:
    runs-on: ubuntu-latest
    needs: deploy
    if: always()
    
    steps:
    - name: Generate deployment report
      run: |
        echo "📊 Deployment Summary"
        echo "===================="
        echo "Repository: ${{ github.repository }}"
        echo "Environment: ${{ steps.env.outputs.ENVIRONMENT }}"
        echo "Status: ${{ needs.deploy.result }}"
        echo "Triggered by: ${{ github.actor }}"
        echo "Commit: ${{ github.sha }}"
        echo "Timestamp: $(date -u +"%Y-%m-%d %H:%M:%S UTC")"
        
        if [ "${{ needs.deploy.result }}" = "success" ]; then
          echo "✅ Deployment successful"
        else
          echo "❌ Deployment failed"
          echo "Check the deploy job logs for details"
        fi