deploy.yml

name: Deploy to Secondary Staging Server

on:
  workflow_dispatch:
  push:
    branches:
      - staging_sec_data

env:
  PHP_VERSION: '8.2'
  SERVER_HOSTNAME: 'staging.scify.org'
  REMOTE_USER: 'project_crowdsourcing_sec_data'
  PROJECT_URL: 'crowdsourcing-ecas.staging.scify.org'

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repo
        uses: actions/checkout@v3.2.0
      
      - name: Install wireguard
        run: sudo apt install wireguard

      - name: Create wg0 file
        uses: cuchi/jinja2-action@v1.2.0
        with:
          template: .github/templates/wg0.j2
          output_file: wg0.conf
          variables: |
            WIREGUARD_PRIVATE_KEY=${{ secrets.WIREGUARD_PRIVATE_KEY }}
            VPN_SERVER_PUBLIC_KEY=${{ secrets.VPN_SERVER_PUBLIC_KEY }}
      
      

      - name: Move wg0.conf to /etc/wireguard
        run: sudo mv wg0.conf /etc/wireguard/wg0.conf

      - name: Start wireguard
        run: sudo wg-quick up wg0

      - name: Checkout repo
        uses: actions/checkout@v3.2.0

      - name: Add frodo to etc hosts
        run: echo "10.10.0.100 frodo.scify.org" | sudo tee -a /etc/hosts

      - name: read password from vault
        uses: hashicorp/vault-action@v2
        with:
          url: https://frodo.scify.org:8200
          caCertificate: ${{ secrets.VAULT_CA_CERT }}
          method: userpass
          username: ${{ secrets.VAULT_USER }}
          password: ${{ secrets.VAULT_PASSWORD }}
          secrets: |
            Projects/data/crowdsourcing/staging_sec_data/database db_name | DB_NAME ;
            Projects/data/crowdsourcing/staging_sec_data/database db_user | DB_USER ;
            Projects/data/crowdsourcing/staging_sec_data/database password | DB_PASSWORD ;
            Projects/data/crowdsourcing/staging_sec_data/google_client_secrets google_client_id | GOOGLE_CLIENT_ID ;
            Projects/data/crowdsourcing/production/email/laravel_mailgun_env_variables MAILGUN_SECRET | MAILGUN_SECRET ;

      
    


      - name: Create .env file
        uses: cuchi/jinja2-action@v1.2.0
        with:
          template: .github/templates/.env.j2
          output_file: .env
          variables: |
            DB_NAME=${{ env.DB_NAME }}
            DB_USER=${{ env.DB_USER }}
            DB_PASSWORD=${{ env.DB_PASSWORD }}
            LARAVEL_STAGING_SEC_DATA_APP_KEY=${{ secrets.LARAVEL_STAGING_SEC_DATA_APP_KEY }}
            PROJECT_URL=${{ env.PROJECT_URL }}
            MAILGUN_SECRET=${{ env.MAILGUN_SECRET }}
            PERSONAL_CLIENT_ID=${{ secrets.PERSONAL_CLIENT_ID }}
            PERSONAL_CLIENT_SECRET=${{ secrets.PERSONAL_CLIENT_SECRET }}
            PASSWORD_CLIENT_SECRET=${{ secrets.PASSWORD_CLIENT_SECRET }}
            FACEBOOK_CLIENT_ID=${{ secrets.FACEBOOK_CLIENT_ID }}
            FACEBOOK_CLIENT_SECRET=${{ secrets.FACEBOOK_CLIENT_SECRET }}
            TWITTER_CLIENT_ID=${{ secrets.TWITTER_CLIENT_ID }}
            TWITTER_CLIENT_SECRET=${{ secrets.TWITTER_CLIENT_SECRET }}
            GOOGLE_CLIENT_ID=${{ env.GOOGLE_CLIENT_ID }}
            GOOGLE_CLIENT_SECRET=${{ secrets.GOOGLE_CLIENT_SECRET }}
            MICROSOFT_CLIENT_ID=${{ secrets.MICROSOFT_CLIENT_ID }}
            MICROSOFT_CLIENT_SECRET=${{ secrets.MICROSOFT_CLIENT_SECRET }}
            LINKEDIN_CLIENT_ID=${{ secrets.LINKEDIN_CLIENT_ID }}
            LINKEDIN_CLIENT_SECRET=${{ secrets.LINKEDIN_CLIENT_SECRET }}
            DEFAULT_ADMIN_USER_PASSWORD_FOR_SEED=${{ secrets.DEFAULT_ADMIN_USER_PASSWORD_FOR_SEED }}
            GOOGLE_TRANSLATE_KEY=${{ secrets.GOOGLE_TRANSLATE_KEY }}
            MAILCHIMP_API_KEY=${{ secrets.MAILCHIMP_API_KEY }}
            SENTRY_LARAVEL_DSN=${{ secrets.SENTRY_LARAVEL_DSN }}
            API_AUTH_TOKEN=${{ secrets.API_AUTH_TOKEN }}
            USERWAY_ID=${{ secrets.USERWAY_ID }}
            AWS_ACCESS_KEY_ID=${{ secrets.AWS_ACCESS_KEY_ID }}
            AWS_SECRET_ACCESS_KEY=${{ secrets.AWS_SECRET_ACCESS_KEY }}

    
      
      - name: Setup node
        uses: actions/setup-node@v4
        with:
          node-version-file: '.nvmrc'

      - name: Install node dependencies
        run: npm install

      - name: Build assets
        run: npm run build

    
      - name: SCP files to staging server
        uses: easingthemes/ssh-deploy@v3.0.1
        env:
            SSH_PRIVATE_KEY: ${{ secrets.SSH_KEY_STAGING_SERVER }}
            REMOTE_PORT: 222
            SOURCE: "./"
            REMOTE_HOST: ${{ env.SERVER_HOSTNAME }}
            REMOTE_USER: ${{ env.REMOTE_USER }}
            TARGET: "/home/${{ env.REMOTE_USER }}/www/${{ env.PROJECT_URL }}"


      - name: Run composer install on remote server
        uses: appleboy/ssh-action@v1.0.3
        with:
          host: ${{ env.SERVER_HOSTNAME }}
          port: 222
          username: ${{ env.REMOTE_USER }}
          key: ${{ secrets.SSH_KEY_STAGING_SERVER }}
          script: |
            source /home/${{ env.REMOTE_USER }}/.profile
            cd /home/${{ env.REMOTE_USER }}/www/${{ env.PROJECT_URL }}
            composer install --no-interaction --no-progress --optimize-autoloader 
  # --no-dev