build-and-deploy-staging.yml

name: Build and deploy GovTool to STAGING server
run-name: Deploy by @${{ github.actor }}

on:
  push:
    branches:
      - staging
  workflow_dispatch:
    inputs:
      isProposalDiscussionForumEnabled:
        description: "Enable proposal discussion forum"
        required: true
        type: choice
        default: "enabled"
        options:
          - "enabled"
          - "disabled"
      forceRebuildDockerImages:
        description: "Force rebuild the docker images"
        required: false
        type: choice
        default: "false"
        options:
          - "true"
          - "false"

env:
  ENVIRONMENT: "staging"
  CARDANO_NETWORK: "sanchonet"
  DOMAIN: "staging.govtool.byron.network"
  FORCE_REBUILD: ${{inputs.forceRebuildDockerImages == 'true'}}

jobs:
  deploy:
    name: Deploy app
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ./scripts/govtool
    env:
      DBSYNC_POSTGRES_DB: ${{ secrets.DBSYNC_POSTGRES_DB || 'cexplorer' }}
      DBSYNC_POSTGRES_PASSWORD: ${{ secrets.DBSYNC_POSTGRES_PASSWORD || 'pSa8JCpQOACMUdGb' }}
      DBSYNC_POSTGRES_USER: ${{ secrets.DBSYNC_POSTGRES_USER || 'postgres' }}
      DBSYNC_POSTGRES_HOST: ${{ secrets.DBSYNC_POSTGRES_HOST || 'postgres' }}
      DBSYNC_POSTGRES_PORT: ${{ secrets.DBSYNC_POSTGRES_PORT || '5432' }}
      GA_CLIENT_EMAIL: ${{ secrets.GA_CLIENT_EMAIL }}
      GA_PRIVATE_KEY: ${{ secrets.GA_PRIVATE_KEY }}
      GRAFANA_ADMIN_PASSWORD: ${{ secrets.GRAFANA_ADMIN_PASSWORD }}
      GRAFANA_SLACK_OAUTH_TOKEN: ${{ secrets.GRAFANA_SLACK_OAUTH_TOKEN }}
      GRAFANA_SLACK_RECIPIENT: ${{ secrets.GRAFANA_SLACK_RECIPIENT }}
      GTM_ID: ${{ secrets.GTM_ID }}
      NPMRC_TOKEN: ${{ secrets.NPMRC_TOKEN }}
      IP_ADDRESS_BYPASSING_BASIC_AUTH1: ${{ secrets.IP_ADDRESS_BYPASSING_BASIC_AUTH1 }}
      IP_ADDRESS_BYPASSING_BASIC_AUTH2: ${{ secrets.IP_ADDRESS_BYPASSING_BASIC_AUTH2 }}
      NEXT_PUBLIC_API_URL: "https://participation.sanchogov.tools"
      NEXT_PUBLIC_GA4_PROPERTY_ID: ${{ secrets.NEXT_PUBLIC_GA4_PROPERTY_ID }}
      STAGING_NGINX_BASIC_AUTH: ${{ secrets.STAGING_NGINX_BASIC_AUTH }}
      PIPELINE_URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
      SENTRY_DSN: ${{ secrets.SENTRY_DSN_FRONTEND }}
      SENTRY_DSN_BACKEND: ${{ secrets.SENTRY_DSN_BACKEND }}
      SENTRY_IGNORE_API_RESOLUTION_ERROR: "1"
      TRAEFIK_LE_EMAIL: "admin+govtool@binarapps.com"
      USERSNAP_SPACE_API_KEY: ${{ secrets.USERSNAP_SPACE_API_KEY }}
      IS_PROPOSAL_DISCUSSION_FORUM_ENABLED: ${{github.event_name == 'push' && 'true' || inputs.isProposalDiscussionForumEnabled == 'enabled'}}
      PDF_API_URL: ${{ secrets.PDF_API_URL}}
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v3
        with:
          aws-access-key-id: ${{ secrets.GHA_AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.GHA_AWS_SECRET_ACCESS_KEY }}
          aws-region: eu-west-1

      - name: Login to AWS ECR
        uses: aws-actions/configure-aws-credentials@v2
        with:
          aws-region: eu-west-1

      - name: Setup SSH agent
        uses: webfactory/ssh-agent@v0.8.0
        with:
          ssh-private-key: ${{ secrets.GHA_SSH_PRIVATE_KEY }}

      - name: Deploy app
        run: |
          make --debug=b all

      - name: Reprovision Grafana
        run: |
          sleep 30 # give grafana time to start up
          make --debug=b reload-grafana