deploy.yml

name: Deploy ScanAndGo BackEnd

on:
  push:
    branches:
      - deploy

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest
    env:
      SSH_AUTH_SOCK: /tmp/ssh_agent.sock

    steps:
      - name: Checkout source
        uses: actions/checkout@v4

      - name: Make Gradle wrapper executable
        run: chmod +x ./gradlew

      - name: Build JAR
        run: ./gradlew clean build -x test --no-daemon

      - name: Rename JAR to app.jar
        run: |
          cp build/libs/*-SNAPSHOT.jar build/libs/app.jar

      - name: Setup SSH with ssh-agent
        run: |
          mkdir -p ~/.ssh
          ssh-agent -a $SSH_AUTH_SOCK > /dev/null
          
          echo "${{ secrets.DEPLOY_KEY }}" | base64 -d > /tmp/deploy_key
          chmod 600 /tmp/deploy_key
          ssh-add /tmp/deploy_key
          rm /tmp/deploy_key
          
          ssh-keyscan -H "${{ secrets.SERVER_HOST }}" >> ~/.ssh/known_hosts

      - name: Verify SSH connection
        run: |
          ssh -o StrictHostKeyChecking=no \
            ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }} \
            "echo 'SSH connection successful'"

      - name: Upload all deploy files
        run: |
          rsync -avz -e "ssh" \
            build/libs/app.jar \
            Dockerfile \
            docker-compose.yml \
            ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}:${{ secrets.DEPLOY_PATH }}/

      - name: Deploy via Docker Compose
        env:
          DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
        run: |
          ssh ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }} << 'ENDSSH'
            cd ${{ secrets.DEPLOY_PATH }}
            docker compose down
            docker compose build --no-cache
            docker compose up -d
            docker compose ps
          ENDSSH