deploy.yaml

name: deploy
on:
  push:
    branches: [main]
    tags: [v*]
  workflow_dispatch:

jobs:
  deploy:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write

    steps:
      - uses: actions/checkout@v4
        with:
          # Without this the fetch depth defaults to 1, which only includes the most recent commit. We want to know the full history so that `git describe` can give more information when it is invoked in the orderbook's crate build script.
          fetch-depth: '0'

      - uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Services image metadata
        id: meta_services
        uses: docker/metadata-action@v5
        with:
          images: ghcr.io/${{ github.repository }}
          labels: |
            org.opencontainers.image.licenses=GPL-3.0-or-later
      - name: Services image build
        uses: docker/build-push-action@v6
        with:
          context: .
          file: Dockerfile
          push: true
          tags: ${{ steps.meta_services.outputs.tags }}
          labels: ${{ steps.meta_services.outputs.labels }}

      - name: Migration image metadata
        id: meta_migration
        uses: docker/metadata-action@v5
        with:
          images: ghcr.io/${{ github.repository }}-migration
          labels: |
            org.opencontainers.image.licenses=GPL-3.0-or-later
      - name: Migration image build
        uses: docker/build-push-action@v6
        with:
          context: .
          file: Dockerfile
          target: migrations
          push: true
          tags: ${{ steps.meta_migration.outputs.tags }}
          labels: ${{ steps.meta_migration.outputs.labels }}

      - uses: cowprotocol/autodeploy-action@v2
        if: ${{ github.ref == 'refs/heads/main' }}
        with:
          images: ghcr.io/cowprotocol/services:main
          tag: ${{ secrets.AUTODEPLOY_TAG }}
          url: ${{ secrets.AUTODEPLOY_URL }}
          token: ${{ secrets.AUTODEPLOY_TOKEN }}
          timeout: 600000 # 10 minutes