mostovik-backend/.gitea/workflows/ci-cd.yml

name: CI/CD Pipeline

on:
  push:
    branches: [ main, develop, dev ]
  pull_request:
    branches: [ main, develop, dev ]

env:
  PYTHON_VERSION: "3.11"

jobs:
  lint:
    name: Code Quality Checks
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        run: |
          REPO_URL=$(echo ${GITHUB_SERVER_URL} | sed "s|://|://oauth2:${{ gitea.token }}@|")
          git clone --depth=1 --branch=${GITHUB_REF_NAME} ${REPO_URL}/${GITHUB_REPOSITORY}.git .
          git checkout ${GITHUB_SHA}

      - name: Install Python and uv
        run: |
          apt-get update && apt-get install -y software-properties-common
          add-apt-repository -y ppa:deadsnakes/ppa
          apt-get update && apt-get install -y python3.11 python3.11-venv
          curl -LsSf https://astral.sh/uv/install.sh | sh
          export PATH="$HOME/.local/bin:$PATH"

      - name: Create virtual environment and install dependencies
        run: |
          export PATH="$HOME/.local/bin:$PATH"
          uv venv --python python3.11
          source .venv/bin/activate
          uv sync --dev

      - name: Run Ruff linting
        run: |
          export PATH="$HOME/.local/bin:$PATH"
          source .venv/bin/activate
          ruff check src/

      - name: Run Ruff formatting check
        run: |
          export PATH="$HOME/.local/bin:$PATH"
          source .venv/bin/activate
          ruff format src/ --check

  test:
    name: Run Tests
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        run: |
          REPO_URL=$(echo ${GITHUB_SERVER_URL} | sed "s|://|://oauth2:${{ gitea.token }}@|")
          git clone --depth=1 --branch=${GITHUB_REF_NAME} ${REPO_URL}/${GITHUB_REPOSITORY}.git .
          git checkout ${GITHUB_SHA}

      - name: Install Python and uv
        run: |
          apt-get update && apt-get install -y software-properties-common
          add-apt-repository -y ppa:deadsnakes/ppa
          apt-get update && apt-get install -y python3.11 python3.11-venv
          curl -LsSf https://astral.sh/uv/install.sh | sh
          export PATH="$HOME/.local/bin:$PATH"

      - name: Create virtual environment and install dependencies
        run: |
          export PATH="$HOME/.local/bin:$PATH"
          uv venv --python python3.11
          source .venv/bin/activate
          uv sync --dev

      - name: Run Django tests
        run: |
          export PATH="$HOME/.local/bin:$PATH"
          source .venv/bin/activate
          export PYTHONPATH="${PWD}/src:${PYTHONPATH}"
          python src/manage.py test tests --verbosity=2
        env:
          DJANGO_SETTINGS_MODULE: config.settings.test
          SECRET_KEY: test-secret-key-for-ci

  build:
    name: Build Docker Images
    runs-on: ubuntu-latest
    needs: [lint, test]

    steps:
      - name: Checkout code
        run: |
          REPO_URL=$(echo ${GITHUB_SERVER_URL} | sed "s|://|://oauth2:${{ gitea.token }}@|")
          git clone --depth=1 --branch=${GITHUB_REF_NAME} ${REPO_URL}/${GITHUB_REPOSITORY}.git .
          git checkout ${GITHUB_SHA}

      - name: Build web image
        run: |
          BRANCH_TAG=$(echo ${GITHUB_REF_NAME} | sed 's/\//-/g')
          SHA_SHORT=$(echo ${GITHUB_SHA} | cut -c1-7)
          docker build -f ./docker/Dockerfile.web -t mostovik-web:${BRANCH_TAG} -t mostovik-web:${BRANCH_TAG}-${SHA_SHORT} .

      - name: Build celery image
        run: |
          BRANCH_TAG=$(echo ${GITHUB_REF_NAME} | sed 's/\//-/g')
          SHA_SHORT=$(echo ${GITHUB_SHA} | cut -c1-7)
          docker build -f ./docker/Dockerfile.celery -t mostovik-celery:${BRANCH_TAG} -t mostovik-celery:${BRANCH_TAG}-${SHA_SHORT} .

  push:
    name: Push to Gitea Registry
    runs-on: ubuntu-latest
    needs: [build]
    if: github.ref == 'refs/heads/main' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/dev'

    steps:
      - name: Checkout code
        run: |
          REPO_URL=$(echo ${GITHUB_SERVER_URL} | sed "s|://|://oauth2:${{ gitea.token }}@|")
          git clone --depth=1 --branch=${GITHUB_REF_NAME} ${REPO_URL}/${GITHUB_REPOSITORY}.git .
          git checkout ${GITHUB_SHA}

      - name: Configure Docker for insecure registry
        run: |
          REGISTRY_URL=$(echo ${GITHUB_SERVER_URL} | sed 's|.*://||')
          sudo mkdir -p /etc/docker
          echo "{\"insecure-registries\": [\"${REGISTRY_URL}\"]}" | sudo tee /etc/docker/daemon.json
          sudo systemctl restart docker || sudo service docker restart || true
          sleep 3

      - name: Login to Gitea Container Registry
        run: |
          REGISTRY_URL=$(echo ${GITHUB_SERVER_URL} | sed 's|.*://||')
          echo "${{ gitea.token }}" | docker login ${REGISTRY_URL} -u ${{ gitea.actor }} --password-stdin

      - name: Build and push images
        run: |
          BRANCH_TAG=$(echo ${GITHUB_REF_NAME} | sed 's/\//-/g')
          SHA_SHORT=$(echo ${GITHUB_SHA} | cut -c1-7)
          REGISTRY_URL=$(echo ${GITHUB_SERVER_URL} | sed 's|.*://||')
          REGISTRY="${REGISTRY_URL}/${{ github.repository_owner }}"

          # Build and push web image
          docker build -f ./docker/Dockerfile.web \
            -t ${REGISTRY}/mostovik-web:${BRANCH_TAG} \
            -t ${REGISTRY}/mostovik-web:${BRANCH_TAG}-${SHA_SHORT} \
            .
          docker push ${REGISTRY}/mostovik-web:${BRANCH_TAG}
          docker push ${REGISTRY}/mostovik-web:${BRANCH_TAG}-${SHA_SHORT}

          # Tag as latest if main branch
          if [ "${GITHUB_REF_NAME}" = "main" ]; then
            docker tag ${REGISTRY}/mostovik-web:${BRANCH_TAG} ${REGISTRY}/mostovik-web:latest
            docker push ${REGISTRY}/mostovik-web:latest
          fi

          # Build and push celery image
          docker build -f ./docker/Dockerfile.celery \
            -t ${REGISTRY}/mostovik-celery:${BRANCH_TAG} \
            -t ${REGISTRY}/mostovik-celery:${BRANCH_TAG}-${SHA_SHORT} \
            .
          docker push ${REGISTRY}/mostovik-celery:${BRANCH_TAG}
          docker push ${REGISTRY}/mostovik-celery:${BRANCH_TAG}-${SHA_SHORT}

          # Tag as latest if main branch
          if [ "${GITHUB_REF_NAME}" = "main" ]; then
            docker tag ${REGISTRY}/mostovik-celery:${BRANCH_TAG} ${REGISTRY}/mostovik-celery:latest
            docker push ${REGISTRY}/mostovik-celery:latest
          fi

      - name: Image summary
        run: |
          REGISTRY_URL=$(echo ${GITHUB_SERVER_URL} | sed 's|.*://||')
          echo "Images pushed to ${REGISTRY_URL}/${{ github.repository_owner }}/"