ci

Author: alechdev

.github/workflows/build-frontend.yaml

@@ -2,66 +2,98 @@ name: Build Frontend
 on:
   push:
     branches: ["main"]
+    tags: ["v*.*"]
     paths:
       - "apps/frontend/package.json"
-
+      - "apps/frontend/package-lock.json"
+      - "apps/frontend/Dockerfile"
+      - "apps/frontend/src/**"
+      - "apps/frontend/public/**"
+      - ".github/workflows/build-frontend.yml"
 jobs:
   check-version:
     runs-on: ubuntu-latest
     outputs:
+      version: ${{ steps.check.outputs.version }}
       version_changed: ${{ steps.check.outputs.changed }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 2
-
       - name: Check if version changed
         id: check
         run: |
-          OLD_VERSION=$(git show HEAD^:apps/frontend/package.json | jq -r '.version')
-          NEW_VERSION=$(jq -r '.version' apps/frontend/package.json)
+          NEW_VERSION=$(node -p "JSON.parse(require('fs').readFileSync('apps/frontend/package.json', 'utf8')).version")
+          echo "version=$NEW_VERSION" >> "$GITHUB_OUTPUT"
+          if ! git rev-parse --verify HEAD^ >/dev/null 2>&1; then
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+            echo "No previous commit found, treating version as changed: $NEW_VERSION"
+            exit 0
+          fi
+          git show HEAD^:apps/frontend/package.json > /tmp/old-package.json
+          OLD_VERSION=$(node -p "JSON.parse(require('fs').readFileSync('/tmp/old-package.json', 'utf8')).version")
           if [ "$OLD_VERSION" != "$NEW_VERSION" ]; then
-            echo "changed=true" >> $GITHUB_OUTPUT
+            echo "changed=true" >> "$GITHUB_OUTPUT"
             echo "Version changed: $OLD_VERSION -> $NEW_VERSION"
           else
-            echo "changed=false" >> $GITHUB_OUTPUT
+            echo "changed=false" >> "$GITHUB_OUTPUT"
             echo "Version unchanged: $NEW_VERSION"
           fi
-
   amd64:
     needs: check-version
-    if: needs.check-version.outputs.version_changed == 'true'
+    if: needs.check-version.outputs.version_changed == 'true' || startsWith(github.ref, 'refs/tags/')
     runs-on: ubuntu-latest
     permissions:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
+      - name: Connect to Tailscale
+        uses: tailscale/github-action@v4
+        with:
+          oauth-client-id: ${{ secrets.TAILSCALE_CLIENT_ID }}
+          oauth-secret: ${{ secrets.TAILSCALE_CLIENT_SECRET }}
+          tags: tag:ci
+      - name: Add registry host entry
+        run: |
+          echo "${{ secrets.TAILSCALE_SERVER_IP }} ${{ secrets.REGISTRY_HOST }}" | sudo tee -a /etc/hosts
+          getent hosts "${{ secrets.REGISTRY_HOST }}"
+          curl -fsS -k "https://${{ secrets.REGISTRY_HOST }}:${{ secrets.REGISTRY_PORT }}/v2/" || true
       - name: Login to registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ${{ secrets.REGISTRY }}
           username: ${{ secrets.REGISTRY_USER }}
-          password: ${{ secrets.REGISTRY_PASSWORD  }}
-
+          password: ${{ secrets.REGISTRY_PASSWORD }}
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          driver-opts: |
+            network=host
+      - name: Extract metadata for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ secrets.REGISTRY }}/${{ secrets.FRONTEND_IMAGE_NAME }}
+          tags: |
+            type=raw,value=latest,enable={{is_default_branch}}
+            type=raw,value=${{ needs.check-version.outputs.version }},enable=${{ needs.check-version.outputs.version_changed == 'true' }}
+            type=ref,event=tag
+            type=sha
       - name: Build image and push to registry
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           file: ./apps/frontend/Dockerfile
           platforms: linux/amd64
           build-args: |
-            VITE_BASE=${{ vars.VITE_BASE || '/' }}
+            VITE_BASE=${{ secrets.VITE_BASE }}
             VITE_MAPBOX_TOKEN=${{ secrets.VITE_MAPBOX_TOKEN }}
-            VITE_SERVER_URL=${{ vars.VITE_SERVER_URL }}
+            VITE_SERVER_URL=${{ secrets.VITE_SERVER_URL }}
             VITE_SITE_URL=${{ secrets.VITE_SITE_URL }}
           push: true
-          tags: ${{ secrets.REGISTRY }}/${{ secrets.FRONTEND_IMAGE_NAME }}:latest
-
-      - name: Trigger deploy via Dokploy API
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+      - name: Trigger deploy webhook
         run: |
-          curl -X POST "${{ secrets.DOKPLOY_API_URL }}/api/application.deploy" \
-            -H "accept: application/json" \
-            -H "Content-Type: application/json" \
-            -H "x-api-key: ${{ secrets.DOKPLOY_API_KEY }}" \
-            -d "{\"applicationId\":\"${{ secrets.DOKPLOY_FRONTEND_APP_ID }}\"}"
+          curl -fsS -X POST "${{ secrets.DEPLOY_WEBHOOK_BASE_URL }}/hooks/emergenciascr-frontend"

apps/frontend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frontend",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "private": true,
   "type": "module",
   "scripts": {