production_server_deployer.yaml

name: Production Server Deployer (CD)

on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Image version tag (e.g., 0.2411.135 or latest)'
        required: true
        default: 'latest'

jobs:
  deploy:
    needs: validate_version
    runs-on: ubuntu-latest
    environment: PROD
    steps:
      - name: Checkout repository
        uses: actions/checkout@v2

      - name: Send discord notification (production server deploy start)
        uses: appleboy/discord-action@master
        with:
          webhook_id: ${{ vars.SERVER_RELEASE_DISCORD_NOTI_ID }}
          webhook_token: ${{ secrets.SERVER_RELEASE_DISCORD_NOTI_TOKEN_SECRET }}
          message: |
            > **🛰️ Server Deployment Start (Prod)**
            > 
            > 🛢️ Repository  : ${{ github.repository }}
            > 🎋 Branch      : ${{ github.ref }}
            > 📐 Version     : ${{ github.event.inputs.version }}
            > 🔁 Run Attempt : ${{ github.run_attempt }}
            > 🤗 Actor       : ${{ github.triggering_actor }}

      - name: Install Docker if not present
        uses: appleboy/ssh-action@v1.0.3
        with:
          host: ${{ vars.INSTANCE_HOST }}
          username: ${{ vars.INSTANCE_USERNAME }}
          key: ${{ secrets.INSTANCE_PEM_KEY }}
          script: |
            if ! command -v docker >/dev/null 2>&1; then
              echo "Installing Docker..."
              sudo apt-get update
              sudo apt-get install -y docker.io
            else
              echo "Docker already installed."
            fi

      - name: Configuration Env file
        uses: appleboy/ssh-action@master
        env:
          VARS_CONTEXT: ${{ toJson(vars) }}
          SECRETS_CONTEXT: ${{ toJson(secrets) }}
        with:
          host: ${{ vars.INSTANCE_HOST }}
          username: ${{ vars.INSTANCE_USERNAME }}
          key: ${{ secrets.INSTANCE_PEM_KEY }}
          envs: VARS_CONTEXT,SECRETS_CONTEXT
          script: |
            cd ~
            jq -s '.[0] * .[1] | del(.INSTANCE_PEM_KEY)' <(echo "$VARS_CONTEXT") <(echo "$SECRETS_CONTEXT") \
              | jq -r 'to_entries | map("\(.key)=\(.value)") | .[]' > .env

      - name: Set deployed image version
        id: set_version
        run: echo "version=${{ github.event.inputs.version }}" >> $GITHUB_OUTPUT

      - name: Run Docker Image
        id: deploy
        uses: appleboy/ssh-action@master
        with:
          host: ${{ vars.INSTANCE_HOST }}
          username: ${{ vars.INSTANCE_USERNAME }}
          key: ${{ secrets.INSTANCE_PEM_KEY }}
          script: |
            sudo docker login -u ${{ secrets.DOCKER_USERNAME }} -p ${{ secrets.DOCKER_PASSWORD }}
            sudo docker pull public.ecr.aws/u1i8r6z9/weave_server_dev_cr:${{ github.event.inputs.version }}
            sudo docker stop weave_server_prod || true
            sudo docker rm weave_server_prod || true
            sudo docker run --name weave_server_prod --env-file ./.env -d -p 8080:8080 public.ecr.aws/u1i8r6z9/weave_server_dev_cr:${{ github.event.inputs.version }}

      - name: Send discord notification (production server deploy failed)
        if: failure() && steps.deploy.outcome == 'failure'
        uses: appleboy/discord-action@master
        with:
          webhook_id: ${{ vars.SERVER_RELEASE_DISCORD_NOTI_ID }}
          webhook_token: ${{ secrets.SERVER_RELEASE_DISCORD_NOTI_TOKEN_SECRET }}
          message: |
            > **🚨 Server Deployment Failed (Prod)**
            > 
            > 🛢️ Repository  : ${{ github.repository }}
            > 🎋 Branch      : ${{ github.ref }}
            > 📐 Version     : ${{ github.event.inputs.version }}
            > 🔁 Run Attempt : ${{ github.run_attempt }}
            > 🤗 Actor       : ${{ github.triggering_actor }}

      - name: Create tag
        uses: actions/github-script@v6
        with:
          github-token: ${{ secrets.RELEASE_TOKEN }}
          script: |
            const version = '${{ steps.set_version.outputs.version }}';
            const tag = `prod-${version}`;
            try {
              await github.rest.git.createRef({
                owner: context.repo.owner,
                repo: context.repo.repo,
                ref: `refs/tags/${tag}`,
                sha: context.sha
              });
              console.log(`Tag ${tag} created successfully.`);
            } catch (error) {
              if (error.status === 422) {
                console.log(`Tag ${tag} already exists. Skipping tag creation.`);
              } else {
                throw error;
              }
            }

      - name: Send discord notification (production server deploy complete)
        uses: appleboy/discord-action@master
        with:
          webhook_id: ${{ vars.SERVER_RELEASE_DISCORD_NOTI_ID }}
          webhook_token: ${{ secrets.SERVER_RELEASE_DISCORD_NOTI_TOKEN_SECRET }}
          message: |
            > **🛰️ Server Deployment Complete (Prod)**
            > 
            > 🛢️ Repository  : ${{ github.repository }} 
            > 🎋 Branch      : ${{ github.ref }}
            > 📐 Version     : ${{ github.event.inputs.version }}
            > 🔁 Run Attempt : ${{ github.run_attempt }}
            > 🤗 Actor       : ${{ github.triggering_actor }}

  validate_version:
    runs-on: ubuntu-latest
    steps:
      - name: Validate version format
        run: |
          if [[ "${{ github.event.inputs.version }}" =~ ^(latest|[0-9]+\.[0-9]+\.[0-9]+)$ ]]; then
            echo "Version format is valid"
          else
            echo "Invalid version format. Use 'latest' or semver format (e.g., 0.2411.135)"
            exit 1
          fi