Pathogen upload

.dockerignore

@@ -0,0 +1 @@
+# example

.github/workflows/build.yaml

@@ -0,0 +1,39 @@
+---
+name: Build & Push Docker Image
+
+on:
+  workflow_call:
+    inputs:
+      environment:
+        required: true
+        type: string
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    environment: ${{ inputs.environment }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v2
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Declare image's tag
+        shell: bash
+        run: |
+          echo "sha_short=$(git rev-parse --short "$GITHUB_SHA")" >> "$GITHUB_ENV"
+      - name: Build
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: false
+          tags: qmra:${{ env.sha_short }}
+          load: true
+      - name: Save
+        run: docker save qmra > img.tar
+      - name: Push
+        uses: appleboy/scp-action@v0.1.7
+        with:
+          host: ${{ secrets.DEPLOY_HOST }}
+          username: ${{ secrets.DEPLOY_USER }}
+          key: ${{ secrets.DEPLOY_SERVER_SSH_KEY }}
+          source: "img.tar"
+          target: ${{ secrets.DEPLOY_PATH }}

.github/workflows/ci.yaml

@@ -0,0 +1,47 @@
+---
+name: CICD Pipeline
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  test:
+    name: test app
+    uses: ./.github/workflows/test.yaml
+  build-dev:
+    needs: test
+    name: build-dev
+    uses: ./.github/workflows/build.yaml
+    with:
+      environment: dev
+    secrets: inherit
+  deploy-dev:
+    needs: build-dev
+    name: deploy-dev
+    uses: ./.github/workflows/deploy.yaml
+    with:
+      environment: dev
+    secrets: inherit
+  build-prod:
+    if: github.ref_name == 'main'
+    needs: test
+    name: build-prod
+    uses: ./.github/workflows/build.yaml
+    with:
+      environment: prod
+    secrets: inherit
+  deploy-prod:
+    if: github.ref_name == 'main'
+    needs:
+      - build-prod
+      - deploy-dev
+    name: deploy-prod
+    uses: ./.github/workflows/deploy.yaml
+    with:
+      environment: prod
+    secrets: inherit

.github/workflows/deploy.yaml

@@ -0,0 +1,31 @@
+---
+name: Deploy Django Application
+
+on:
+  workflow_call:
+    inputs:
+      environment:
+        required: true
+        type: string
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment: ${{ inputs.environment }}
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+    - name: Declare image's tag
+      shell: bash
+      run: |
+        echo "sha_short=$(git rev-parse --short "$GITHUB_SHA")" >> "$GITHUB_ENV"
+    - name: Deploy
+      uses: appleboy/ssh-action@v1.1.0
+      with:
+        host: ${{ secrets.DEPLOY_HOST }}
+        username: ${{ secrets.DEPLOY_USER }}
+        key: ${{ secrets.DEPLOY_SERVER_SSH_KEY }}
+        script: |
+          cd ${{ secrets.DEPLOY_PATH }} && git pull && git checkout ${{ github.head_ref || github.ref_name }}
+          microk8s ctr image import img.tar && rm img.tar
+          cd infra/helm
+          microk8s helm upgrade --install -f ./qmra/${{ inputs.environment }}.values.yaml qmra ./qmra -n qmra --set app_secret_key.value=${{ secrets.APP_SECRET_KEY }},image.tag=${{ env.sha_short }}

.github/workflows/test.yaml

@@ -0,0 +1,18 @@
+---
+name: Test Django Application
+
+on:
+  workflow_call:
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - uses: actions/setup-python@v5
+      with:
+        python-version: '3.11'
+    - name: Install dependencies
+      run: pip install -r requirements.txt && pip install -r requirements.test.txt
+    - name: Test
+      run: python manage.py test

.gitignore

@@ -1,131 +1,13 @@
-# Byte-compiled / optimized / DLL files
+.DS_Store
 __pycache__/
-*.py[cod]
-*$py.class
-
-# C extensions
-*.so
-
-# Distribution / packaging
-.Python
-build/
-develop-eggs/
-dist/
-downloads/
-eggs/
-.eggs/
-lib/
-lib64/
-parts/
-sdist/
-var/
-wheels/
-pip-wheel-metadata/
-share/python-wheels/
-*.egg-info/
-.installed.cfg
-*.egg
-MANIFEST
-
-# PyInstaller
-#  Usually these files are written by a python script from a template
-#  before PyInstaller builds the exe, so as to inject date/other infos into it.
-*.manifest
-*.spec
-
-# Installer logs
-pip-log.txt
-pip-delete-this-directory.txt
-
-# Unit test / coverage reports
-htmlcov/
-.tox/
-.nox/
-.coverage
-.coverage.*
-.cache
-nosetests.xml
-coverage.xml
-*.cover
-*.py,cover
-.hypothesis/
-.pytest_cache/
-
-# Translations
-*.mo
-*.pot
-
-# Django stuff:
-*.log
-local_settings.py
-db.sqlite3-journal
-
-# Flask stuff:
-instance/
-.webassets-cache
-
-# Scrapy stuff:
-.scrapy
-
-# Sphinx documentation
-docs/_build/
-
-# PyBuilder
-target/
-
-# Jupyter Notebook
-.ipynb_checkpoints
-email_service.ipynb
-
-# IPython
-profile_default/
-ipython_config.py
-
-# pyenv
-.python-version
-
-# pipenv
-#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
-#   However, in case of collaboration, if having platform-specific dependencies or dependencies
-#   having no cross-platform support, pipenv may install dependencies that don't work, or not
-#   install all needed dependencies.
-#Pipfile.lock
-
-# PEP 582; used by e.g. github.com/David-OConnor/pyflow
-__pypackages__/
-
-# Celery stuff
-celerybeat-schedule
-celerybeat.pid
-
-# SageMath parsed files
-*.sage.py
-
-# Environments
-.env
-.venv
-env/
 venv/
-ENV/
-env.bak/
-venv.bak/
-
-# Spyder project settings
-.spyderproject
-.spyproject
-
-# Rope project settings
-.ropeproject
-
-# mkdocs documentation
-/site
-
-# mypy
-.mypy_cache/
-.dmypy.json
-dmypy.json
-
-# Pyre type checker
-.pyre/
+.idea
+.static
 qmra.db
-notebooks
+default_qmra_data.db
+qmra-prod.db
+dump*
+prod-migrations/
+*.tar
+.vscode
+test.zip

Dockerfile

@@ -0,0 +1,20 @@
+# pull official base image
+FROM python:3.12.5-slim
+
+# set work directory
+WORKDIR qmra
+
+# set environment variables
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+
+RUN apt-get update -y && apt upgrade -y && apt-get clean && rm -rf /var/lib/apt/lists/*
+# install dependencies
+COPY ./requirements.txt .
+RUN pip install --upgrade pip &&\
+    pip install --no-cache-dir -r requirements.txt &&\
+    pip install --no-cache-dir gunicorn
+
+# copy project
+COPY ./qmra ./qmra
+COPY ./manage.py .