feat: local deployment

.dockerignore

@@ -3,4 +3,8 @@ Dockerfile
 node_modules
 npm-debug.log
 README.md
-.next
+.next
+.kube-workflow
+.github
+.git
+.DS_Store

.env.development

@@ -1,7 +1,11 @@
-NEXT_TELEMETRY_DISABLED=1
-NEXT_PUBLIC_SITE_URL=""
-NEXT_PUBLIC_SENTRY_DSN=""
-NEXT_PUBLIC_SENTRY_ENV=""
+NEXT_PUBLIC_SENTRY_DSN="https://[email protected]/68"
+NEXT_PUBLIC_SENTRY_ENV="dev"
 NEXT_PUBLIC_MATOMO_URL=""
 NEXT_PUBLIC_MATOMO_SITE_ID=""
-NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"
+NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"
+KEYCLOAK_URL="http://localhost:8080/realms/app-realm"
+KEYCLOAK_CLIENT_SECRET="**********"
+KEYCLOAK_CLIENT_ID="app-client"
+NEXTAUTH_URL="http://localhost:3000"
+NEXTAUTH_SECRET="A+EQqudlGhqTLDnBbCvohHBfbhUjTXAbZYy1NKsSsys="
+NEXT_PUBLIC_HASURA_GRAPHQL_ENDPOINT_URL="http://localhost:8082/v1/graphql"

.env.production

@@ -1,7 +1,5 @@
-NEXT_TELEMETRY_DISABLED=1
-NEXT_PUBLIC_SITE_URL="https://template.fabrique.social.gouv.fr/"
 NEXT_PUBLIC_SENTRY_DSN="https://[email protected]/68"
 NEXT_PUBLIC_SENTRY_ENV="production"
 NEXT_PUBLIC_MATOMO_URL="https://matomo.fabrique.social.gouv.fr"
 NEXT_PUBLIC_MATOMO_SITE_ID=63
-NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"
+NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"

.env.staging

@@ -1,7 +1,5 @@
-NEXT_TELEMETRY_DISABLED=1
-NEXT_PUBLIC_SITE_URL="https://template.fabrique.social.gouv.fr/"
 NEXT_PUBLIC_SENTRY_DSN="https://[email protected]/68"
 NEXT_PUBLIC_SENTRY_ENV="development"
 NEXT_PUBLIC_MATOMO_URL=""
 NEXT_PUBLIC_MATOMO_SITE_ID=""
-NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"
+NEXT_PUBLIC_APP_REPOSITORY_URL="https://github.com/SocialGouv/template"

.github/CODEOWNERS

@@ -1,5 +1,4 @@
 # Protect workflow files
 .github/workflows/*.yml @socialgouv/sre
 .github/CODEOWNERS @socialgouv/sre
-.k8s/ @socialgouv/sre
-.socialgouv/  @socialgouv/sre
+.kontinuous/  @socialgouv/sre

.github/workflows/build.yml

@@ -8,7 +8,7 @@ concurrency:
 
 jobs:
   build:
-    name: Build and export
+    name: Build
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -26,6 +26,6 @@ jobs:
       - name: Install dependencies
         run: |
           yarn install --prefer-offline --frozen-lockfile
-      - name: Build and export
+      - name: Build
         run: |
-          yarn build:export
+          yarn build

.github/workflows/codeql-analysis.yml

@@ -50,6 +50,7 @@ jobs:
         uses: github/codeql-action/init@v2
         with:
           languages: ${{ matrix.language }}
+          queries: security-and-quality
           # If you wish to specify custom queries, you can do so here or in a config file.
           # By default, queries listed here will override any specified in a config file.
           # Prefix the list here with "+" to use these queries and those in the config file.

.github/workflows/kontinuous-webhook-delete.yml

@@ -0,0 +1,12 @@
+name: Deactivate
+on:
+  delete:
+
+concurrency:
+  cancel-in-progress: true
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.ref }}
+
+jobs:
+  kontinuous:
+    uses: SocialGouv/kontinuous/.github/workflows/workflow-webhook.yaml@v1
+    secrets: inherit

.github/workflows/kontinuous-webhook-deploy.yml

@@ -0,0 +1,14 @@
+name: Deploy
+on:
+  push:
+    branches:
+      - "**"
+
+concurrency:
+  cancel-in-progress: true
+  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.event.ref }}
+
+jobs:
+  kontinuous:
+    uses: SocialGouv/kontinuous/.github/workflows/workflow-webhook.yaml@v1
+    secrets: inherit

.github/workflows/release.yml

@@ -1,17 +1,27 @@
 name: Release
-
 on:
-  workflow_dispatch:
   push:
-    branches: [main, alpha, beta, next]
+    branches:
+      - main
+  workflow_dispatch:
 
 jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
     steps:
-      - uses: SocialGouv/actions/autodevops-release@v1
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          ssh-key: ${{ secrets.DEPLOY_KEY }}
+      - name: Setup Node.js
+        uses: actions/setup-node@v3
         with:
-          author-name: ${{ secrets.SOCIALGROOVYBOT_NAME }}
-          author-email: ${{ secrets.SOCIALGROOVYBOT_EMAIL }}
-          github-token: ${{ secrets.SOCIALGROOVYBOT_BOTO_PAT }}
+          node-version: "lts/*"
+      - name: Install additional semantic-release plugins
+        run: npm i --save=false --force semantic-release @socialgouv/releaserc @semantic-release/changelog @semantic-release/git @semantic-release/npm
+      - name: Release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: npx semantic-release --extends @socialgouv/releaserc

.gitignore

@@ -44,4 +44,7 @@ cypress/videos
 cypress/screenshots
 
 # Robots.txt
-robots.txt
+robots.txt
+
+# Keycloak extensions deployed
+*.jar.deployed

.husky/pre-commit

@@ -1,4 +1,6 @@
 #!/bin/sh
 . "$(dirname "$0")/_/husky.sh"
 
-yarn lint-staged
+
+yarn lint-staged
+exec < /dev/tty; yarn node-talisman --githook pre-commit -i

.kontinuous/.gitignore

@@ -0,0 +1,2 @@
+env/local/templates/kubeconfig.yaml
+kind/kubeconfig.yaml