opt(rate-limit): Setting rate limit #86
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy xyzuan-api-v2 Development Build | |
| on: | |
| push: | |
| branches: | |
| - dev | |
| jobs: | |
| test: | |
| name: Run Treaty Tests | |
| runs-on: self-hosted | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Initialize Bun Environtment | |
| uses: oven-sh/setup-bun@v2 | |
| - name: Declaring some Global Environtment vars | |
| run: | | |
| echo "PORT=4031" >> $GITHUB_ENV | |
| echo "DOMAIN=localhost" >> $GITHUB_ENV | |
| echo "NODE_ENV=dev" >> $GITHUB_ENV | |
| echo "PASSWORD_PEPPER=${{ secrets.PASSWORD_PEPPER }}" >> $GITHUB_ENV | |
| echo "DATABASE_URL=${{ secrets.DATABASE_URL_DEV }}" >> $GITHUB_ENV | |
| echo "GOOGLE_CLIENT_ID=${{ secrets.GOOGLE_CLIENT_ID }}" >> $GITHUB_ENV | |
| echo "GOOGLE_CLIENT_SECRET=${{ secrets.GOOGLE_CLIENT_SECRET }}" >> $GITHUB_ENV | |
| echo "GITHUB_CLIENT_ID=${{ secrets.GH_CLIENT_ID }}" >> $GITHUB_ENV | |
| echo "GITHUB_CLIENT_SECRET=${{ secrets.GH_CLIENT_SECRET }}" >> $GITHUB_ENV | |
| echo "LINKEDIN_CLIENT_ID=${{ secrets.LINKEDIN_CLIENT_ID }}" >> $GITHUB_ENV | |
| echo "LINKEDIN_CLIENT_SECRET=${{ secrets.LINKEDIN_CLIENT_SECRET }}" >> $GITHUB_ENV | |
| echo "TELEGRAM_TOKEN=${{ secrets.TELEGRAM_TOKEN }}" >> $GITHUB_ENV | |
| echo "TELEGRAM_CHAT_ID=${{ secrets.TELEGRAM_CHAT_ID }}" >> $GITHUB_ENV | |
| echo "CLOUDINARY_CLOUD_NAME=${{ secrets.CLOUDINARY_CLOUD_NAME }}" >> $GITHUB_ENV | |
| echo "CLOUDINARY_API_KEY=${{ secrets.CLOUDINARY_API_KEY }}" >> $GITHUB_ENV | |
| echo "CLOUDINARY_API_SECRET=${{ secrets.CLOUDINARY_API_SECRET }}" >> $GITHUB_ENV | |
| echo "MINIO_HOST=${{ secrets.MINIO_HOST }}" >> $GITHUB_ENV | |
| echo "MINIO_BUCKET_NAME=${{ secrets.MINIO_BUCKET_NAME }}" >> $GITHUB_ENV | |
| echo "MINIO_ACCESS_KEY=${{ secrets.MINIO_ACCESS_KEY }}" >> $GITHUB_ENV | |
| echo "MINIO_SECRET_KEY=${{ secrets.MINIO_SECRET_KEY }}" >> $GITHUB_ENV | |
| echo "AZURE_AI_URL=${{ secrets.AZURE_AI_URL }}" >> $GITHUB_ENV | |
| echo "AZURE_AI_API_KEY=${{ secrets.AZURE_AI_API_KEY }}" >> $GITHUB_ENV | |
| echo "AXIOM_SECRET_TOKEN=${{ secrets.AXIOM_SECRET_TOKEN }}" >> $GITHUB_ENV | |
| echo "AXIOM_DATASET=${{ secrets.AXIOM_DATASET }}" >> $GITHUB_ENV | |
| echo "REDIS_URL=${{ secrets.REDIS_URL_DEV }}" >> $GITHUB_ENV | |
| - name: Run Treaty Tests | |
| id: treaty_test | |
| run: | | |
| bun install | |
| bunx prisma generate | |
| bun test | |
| echo "::set-output name=result::success" | |
| - name: Mark as failed if tests fail | |
| if: failure() | |
| run: echo "::set-output name=result::failure" | |
| sonarqube: | |
| name: Run Code Quality Check | |
| runs-on: self-hosted | |
| needs: test | |
| if: success() | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: "Check code with SonarQube" | |
| uses: sonarsource/sonarqube-scan-action@v4 | |
| env: | |
| SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} | |
| SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }} | |
| build: | |
| name: Build & Push to GHCR Registry | |
| runs-on: self-hosted | |
| needs: sonarqube | |
| if: success() | |
| steps: | |
| - name: Send Telegram Message on Build | |
| uses: appleboy/telegram-action@master | |
| with: | |
| to: ${{ secrets.TELEGRAM_CHAT_ID }} | |
| token: ${{ secrets.TELEGRAM_TOKEN }} | |
| message: | | |
| ${{ github.actor }} triggered build: | |
| Last Commit message: ${{ github.event.commits[0].message }} | |
| Repository: ${{ github.repository }} | |
| See changes: https://github.com/${{ github.repository }}/commit/${{github.sha}} | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Settle up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Declaring some Global Environtment vars | |
| run: | | |
| echo "BRANCH_NAME=${GITHUB_REF##*/}" >> $GITHUB_ENV | |
| echo "SHA=$(echo "$GITHUB_SHA" | head -c 7)" >> $GITHUB_ENV | |
| echo "ENV=dev" >> $GITHUB_ENV | |
| echo "PORT=3121" >> $GITHUB_ENV | |
| echo "BASE_URL=https://api.xyzuan.my.id/dev" >> $GITHUB_ENV | |
| echo "DOMAIN=xyzuan.my.id" >> $GITHUB_ENV | |
| echo "REGISTRY=ghcr.io/xyzuan" >> $GITHUB_ENV | |
| echo "IMAGE_NAME=xyzuan_api_v2" >> $GITHUB_ENV | |
| echo "DOCKERFILE=misc/Dockerfile" >> $GITHUB_ENV | |
| - name: Authenticating to Eden Server realms. | |
| uses: webfactory/[email protected] | |
| with: | |
| ssh-private-key: ${{ secrets.SERVER_PRIVATE_KEY }} | |
| - name: Authenticating to GHCR realms | |
| run: echo "${{ secrets.GH_TOKEN }}" | docker login -u "${{ github.actor }}" ghcr.io --password-stdin | |
| - name: Treaty Build the Docker image | |
| run: | | |
| docker build \ | |
| --build-arg PORT=${{ env.PORT }} \ | |
| --build-arg NODE_ENV=${{ env.ENV }} \ | |
| --build-arg BASE_URL=${{ env.BASE_URL }} \ | |
| --build-arg DOMAIN=${{ env.DOMAIN }} \ | |
| --build-arg PASSWORD_PEPPER=${{ secrets.PASSWORD_PEPPER }} \ | |
| --build-arg DATABASE_URL=${{ secrets.DATABASE_URL_DEV_INTERNAL }} \ | |
| --build-arg GOOGLE_CLIENT_ID=${{ secrets.GOOGLE_CLIENT_ID }} \ | |
| --build-arg GOOGLE_CLIENT_SECRET=${{ secrets.GOOGLE_CLIENT_SECRET }} \ | |
| --build-arg GITHUB_CLIENT_ID=${{ secrets.GH_CLIENT_ID }} \ | |
| --build-arg GITHUB_CLIENT_SECRET=${{ secrets.GH_CLIENT_SECRET }} \ | |
| --build-arg LINKEDIN_CLIENT_ID=${{ secrets.LINKEDIN_CLIENT_ID }} \ | |
| --build-arg LINKEDIN_CLIENT_SECRET=${{ secrets.LINKEDIN_CLIENT_SECRET }} \ | |
| --build-arg TELEGRAM_TOKEN=${{ secrets.TELEGRAM_TOKEN }} \ | |
| --build-arg TELEGRAM_CHAT_ID=${{ secrets.TELEGRAM_CHAT_ID }} \ | |
| --build-arg CLOUDINARY_CLOUD_NAME=${{ secrets.CLOUDINARY_CLOUD_NAME }} \ | |
| --build-arg CLOUDINARY_API_KEY=${{ secrets.CLOUDINARY_API_KEY }} \ | |
| --build-arg CLOUDINARY_API_SECRET=${{ secrets.CLOUDINARY_API_SECRET }} \ | |
| --build-arg MINIO_HOST=${{ secrets.MINIO_HOST }} \ | |
| --build-arg MINIO_BUCKET_NAME=${{ secrets.MINIO_BUCKET_NAME }} \ | |
| --build-arg MINIO_ACCESS_KEY=${{ secrets.MINIO_ACCESS_KEY }} \ | |
| --build-arg MINIO_SECRET_KEY=${{ secrets.MINIO_SECRET_KEY }} \ | |
| --build-arg AZURE_AI_URL=${{ secrets.AZURE_AI_URL }} \ | |
| --build-arg AZURE_AI_API_KEY=${{ secrets.AZURE_AI_API_KEY }} \ | |
| --build-arg AXIOM_SECRET_TOKEN=${{ secrets.AXIOM_SECRET_TOKEN }} \ | |
| --build-arg AXIOM_DATASET=${{ secrets.AXIOM_DATASET }} \ | |
| --build-arg REDIS_URL=${{ secrets.REDIS_URL_DEV_INTERNAL }} \ | |
| -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.BRANCH_NAME }} -f ${{ env.DOCKERFILE }} . | |
| - name: Adding tags to the Images | |
| run: | | |
| docker tag ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.BRANCH_NAME }} ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{env.SHA}} | |
| - name: Bring the Images to GHCR | |
| run: | | |
| docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.BRANCH_NAME }} | |
| docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.SHA }} | |
| serve: | |
| name: Serve Images in Server | |
| runs-on: self-hosted | |
| needs: build | |
| if: success() | |
| steps: | |
| - name: Authenticating to Eden Server realms | |
| uses: webfactory/[email protected] | |
| with: | |
| ssh-private-key: ${{ secrets.SERVER_PRIVATE_KEY }} | |
| - name: Declaring some Global Environtment vars | |
| run: | | |
| echo "BRANCH_NAME=${GITHUB_REF##*/}" >> $GITHUB_ENV | |
| echo "PORT=3121" >> $GITHUB_ENV | |
| echo "CT_NAME=xyzuan-api-v2-dev" >> $GITHUB_ENV | |
| echo "REGISTRY=ghcr.io/xyzuan" >> $GITHUB_ENV | |
| echo "IMAGE_NAME=xyzuan_api_v2" >> $GITHUB_ENV | |
| - name: Serve the Images | |
| run: | | |
| ssh-keyscan -t rsa ${{ secrets.SERVER_HOST }} >> ~/.ssh/known_hosts | |
| ssh ${{ github.actor }}@${{ secrets.SERVER_HOST }} << 'EOF' | |
| echo 'Authenticating to GHCR realms...' | |
| echo "${{ secrets.GH_TOKEN }}" | docker login -u "${{ github.actor }}" ghcr.io --password-stdin | |
| echo 'Pulling the latest image from GHCR...' | |
| docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.BRANCH_NAME }} | |
| echo 'Force Blowing the existing Docker Swarm Service...' | |
| docker service rm ${{ env.CT_NAME }} | |
| echo 'Creating the Docker Swarm Service...' | |
| docker service create \ | |
| --name ${{ env.CT_NAME }} \ | |
| --replicas 6 \ | |
| --with-registry-auth \ | |
| --restart-condition any \ | |
| --network nginx_swarm \ | |
| -p ${{ env.PORT }}:${{ env.PORT }} \ | |
| ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.BRANCH_NAME }} | |
| EOF | |
| - name: Send Telegram Message Success Build | |
| uses: appleboy/telegram-action@master | |
| with: | |
| to: ${{ secrets.TELEGRAM_CHAT_ID }} | |
| token: ${{ secrets.TELEGRAM_TOKEN }} | |
| message: | | |
| Build Success, | |
| Last Commit message: ${{ github.event.commits[0].message }} | |
| Repository: ${{ github.repository }} | |
| See changes: https://github.com/${{ github.repository }}/commit/${{github.sha}} |