yara724-api/.woodpecker.yml

# yara724/api — development deployment (Deploy-Develop)
# Manual tasks: see ci-cd/TASK.md
# Requires: repo marked Trusted in Woodpecker (host volume mounts)

when:
  - event: push
    branch: main
  - event: manual

skip_clone: true

variables:
  - &host_workspace /data/1-deploy/gitea/yara724/api
  - &workspace_volume /data/1-deploy/gitea/yara724/api:/workspace
  - &host_ssh /home/talieh/.ssh:/root/.ssh:ro
  - &pipeline_env
    WORKSPACE: *host_workspace
    PROJECT_NAME: Yara724 API
    ENVIRONMENT: Development
    APPLICATION_URL: https://y724-user.ittalie.ir/api
    GIT_COMMIT_URL: https://git.ittalie.com/Yara724/api/commit/
    GIT_BRANCH: main
    COMPOSE_FILE: docker-compose.yml
    SUCCESS_COLOR: "#36a64f"
    FAILURE_COLOR: "#dc3545"

steps:
  pull:
    image: docker.arvancloud.ir/alpine/git:latest
    environment:
      <<: *pipeline_env
      GIT_SSH_COMMAND: ssh -o UserKnownHostsFile=/tmp/known_hosts -o StrictHostKeyChecking=yes
    volumes:
      - *workspace_volume
      - *host_ssh
    commands:
      - git config --global --add safe.directory /workspace
      - mkdir -p /tmp && ssh-keyscan -H git.ittalie.com >> /tmp/known_hosts
      - cd /workspace
      - git pull origin main
      - date +%s > /workspace/.wp-deploy-start

  deploy:
    image: docker.arvancloud.ir/docker:24-cli
    environment:
      <<: *pipeline_env
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - *workspace_volume
    commands:
      - cd /workspace
      - docker compose -f docker-compose.yml up -d --build

  notify-success:
    image: docker.arvancloud.ir/alpine:3.20
    environment:
      <<: *pipeline_env
      ROCKETCHAT_WEBHOOK:
        from_secret: rocketchat_webhook
    volumes:
      - *workspace_volume
    when:
      - status: success
    commands:
      - apk add --no-cache curl jq git > /dev/null
      - |
        set -euo pipefail
        git config --global --add safe.directory /workspace
        cd /workspace

        COMMIT_HASH="$(git rev-parse --short HEAD)"
        DEPLOY_START="$(cat /workspace/.wp-deploy-start)"
        DEPLOY_END="$(date +%s)"
        DEPLOY_DURATION="$((DEPLOY_END - DEPLOY_START))"

        COMMIT_1="$(git log -1 --pretty=format:'%s')"
        COMMIT_2="$(git log -2 --pretty=format:'%s' | tail -n1)"
        COMMIT_3="$(git log -3 --pretty=format:'%s' | tail -n1)"

        TITLE="✅ ${PROJECT_NAME} - ${ENVIRONMENT} ✅"
        TEXT="🌐 **URL**: ${APPLICATION_URL}

        🔖 **Commit Hash**: [${COMMIT_HASH}](${GIT_COMMIT_URL}${COMMIT_HASH})

        📝 **Recent Changes**:

        • ${COMMIT_1}

        • ${COMMIT_2}

        • ${COMMIT_3}

        ⏱️ **Deployment Duration**: ${DEPLOY_DURATION}s"

        payload="$(jq -n \
          --arg title "$TITLE" \
          --arg text "$TEXT" \
          --arg color "$SUCCESS_COLOR" \
          '{text: $title, attachments: [{text: $text, color: $color}]}')"

        curl -fsS -H "Content-Type: application/json" -d "$payload" "$ROCKETCHAT_WEBHOOK" >/dev/null
        rm -f /workspace/.wp-deploy-start

  notify-failure:
    image: docker.arvancloud.ir/alpine:3.20
    environment:
      <<: *pipeline_env
      ROCKETCHAT_WEBHOOK:
        from_secret: rocketchat_webhook
    volumes:
      - *workspace_volume
    when:
      - status: failure
    commands:
      - apk add --no-cache curl jq git > /dev/null
      - |
        set -euo pipefail
        git config --global --add safe.directory /workspace
        cd /workspace

        COMMIT_HASH="$(git rev-parse --short HEAD 2>/dev/null || echo unknown)"
        TITLE="💥 ${PROJECT_NAME} - ${ENVIRONMENT} 💥"
        TEXT="━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
        🌐 **Application URL**

        ${APPLICATION_URL}

        🔖 **Commit**

        \`${COMMIT_HASH}\`

        ⚠️ **Pipeline failed** — check Woodpecker for the failing step.
        ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"

        payload="$(jq -n \
          --arg title "$TITLE" \
          --arg text "$TEXT" \
          --arg color "$FAILURE_COLOR" \
          '{text: $title, attachments: [{text: $text, color: $color}]}')"

        curl -fsS -H "Content-Type: application/json" -d "$payload" "$ROCKETCHAT_WEBHOOK" >/dev/null || true
        rm -f /workspace/.wp-deploy-start