Staging

.barrelsby.json

@@ -8,7 +8,8 @@
         "./src/hooks",
         "./src/interfaces",
         "./src/repositories",
-        "./src/utils"
+        "./src/utils",
+        "./src/services"
     ],
     "exclude": ["__mock__", "__mocks__", ".spec.ts"],
     "delete": true

.env.example

@@ -0,0 +1,8 @@
+POSTGRES_USER=
+POSTGRES_PASSWORD=
+POSTGRES_DB=
+POSTGRES_URL=
+
+CORS_WHITE_LIST=
+COOKIE_SECRET=
+JWT_SECRET=

.github/workflows/commit-lint.yml

@@ -1,4 +1,4 @@
-name: CI
+name: Check conventional of commit message
 on:
   - pull_request
   - push

.github/workflows/dev-deploy.yml

@@ -0,0 +1,118 @@
+on:
+  push:
+    branches:
+      - staging
+
+permissions:
+  contents: write
+  pull-requests: write
+  packages: write
+
+env:
+  REGISTRY: ${{vars.REGISTRY_NAME}}
+  IMAGE_NAME: ticklabvn/ssps-be
+  CD_USERNAME: ${{github.actor}}
+  TEST_DEPLOY_IMAGE_NAME: ticklabvn/ssps-be-test-deploy
+
+name: Release and deploy
+
+jobs:
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        name: Checkout repository
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
+
+      - name: Setup Docker buildx
+        uses: docker/setup-buildx-action@v2
+        with:
+          version: v0.9.1
+
+      - name: Log into registry ${{ env.REGISTRY }}
+        uses: docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ env.CD_USERNAME }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v3
+        with:
+          context: .
+          push: true
+          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+  deploy:
+    name: Deploy
+    runs-on: ubuntu-latest
+    needs: [build]
+    env:
+      POSTGRES_URL: postgresql://${{ secrets.POSTGRES_USER }}:${{ secrets.POSTGRES_PASSWORD }}@postgres:${{secrets.POSTGRES_PORT}}/${{ secrets.POSTGRES_DB }}?schema=public
+    steps:
+      - name: Deploy
+        uses: appleboy/ssh-action@master
+        with:
+          host: ${{ secrets.VPS_HOST }}
+          port: ${{ secrets.VPS_PORT }}
+          username: ${{ secrets.VPS_USERNAME }}
+          password: ${{ secrets.VPS_PASSWORD }}
+
+          script: |
+            export CR_PAT=${{ secrets.REGISTRY_TOKEN }}
+            echo $CR_PAT | docker login ${{ env.REGISTRY }} -u ${{ env.CD_USERNAME }} --password-stdin
+            docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+            mkdir -p $HOME/${{env.IMAGE_NAME}} && cd $HOME/${{env.IMAGE_NAME}}
+
+            rm -f .env
+            echo FASTIFY_PORT=${{ secrets.FASTIFY_PORT }} >> .env
+            echo FASTIFY_TEST_PORT=${{ secrets.FASTIFY_PORT_TEST_DEPLOY }} >> .env
+            echo >> .env            
+
+            echo POSTGRES_USER=${{ secrets.POSTGRES_USER }} >> .env
+            echo POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }} >> .env
+            echo POSTGRES_DB=${{ secrets.POSTGRES_DB }} >> .env
+            echo POSTGRES_PORT=${{ secrets.POSTGRES_PORT }} >> .env
+            echo POSTGRES_TEST_PORT=${{ secrets.POSTGRES_PORT_TEST_DEPLOY }} >> .env
+            echo POSTGRES_URL=${{ env.POSTGRES_URL }} >> .env
+            echo >> .env   
+
+            echo CORS_WHITE_LIST=${{ secrets.CORS_WHITE_LIST }} >> .env
+            echo COOKIE_SECRET=${{ secrets.COOKIE_SECRET }} >> .env
+            echo JWT_SECRET=${{ secrets.JWT_SECRET }} >> .env
+            echo >> .env   
+
+            echo MINIO_URL=${{ secrets.MINIO_URL }} >> .env
+            echo MINIO_SERVER_ENDPOINT=${{ secrets.MINIO_SERVER_ENDPOINT }} >> .env
+            echo MINIO_PORT=${{ secrets.MINIO_PORT }} >> .env
+            echo MINIO_ACCESS_KEY=${{ secrets.MINIO_ACCESS_KEY }} >> .env
+            echo MINIO_SECRET_KEY=${{ secrets.MINIO_SECRET_KEY }} >> .env
+            echo MINIO_BUCKET_NAME=${{ secrets.MINIO_BUCKET_NAME }} >> .env
+            echo >> .env   
+
+            echo CHECKOUT_ENVIRONMENT=${{ vars.CHECKOUT_ENVIRONMENT }} >> .env
+            echo PAYPAL_LIVE_ENDPOINT=${{ vars.PAYPAL_LIVE_ENDPOINT }} >> .env
+            echo PAYPAL_SANDBOX_ENDPOINT=${{ vars.PAYPAL_SANDBOX_ENDPOINT }} >> .env
+            echo PAYPAL_CLIENT_ID=${{ secrets.PAYPAL_CLIENT_ID }} >> .env
+            echo PAYPAL_CLIENT_SECRET=${{ secrets.PAYPAL_CLIENT_SECRET }} >> .env
+            echo >> .env   
+
+            echo GOOGLE_CLIENT_ID=${{ secrets.GOOGLE_CLIENT_ID }} >> .env
+            echo GOOGLE_CLIENT_SECRET=${{ secrets.GOOGLE_CLIENT_SECRET }} >> .env
+            echo GOOGLE_REDIRECT_URL=${{ secrets.GOOGLE_REDIRECT_URL }} >> .env
+            echo UI_HOME_URL=${{ secrets.UI_HOME_URL }} >> .env
+            echo >> .env  
+
+            curl -s https://${{secrets.READ_FILE_ACCESS_TOKEN}}@raw.githubusercontent.com/${{github.repository}}/staging/docker-compose.yml -O -f
+            docker compose -f docker-compose.yml down --volumes --remove-orphans
+            docker compose -f docker-compose.yml up -d ${{vars.DOCKER_COMPOSE_DEPLOY_SERVICE_NAME}} && 
+            docker exec -it ssps-be /bin/sh -c "npx prisma db seed"
+
+            docker exec -it ssps-be /bin/sh -c "npx prisma db seed"
+
+            docker logout ${{ env.REGISTRY }}
+

.github/workflows/release.yml

@@ -1,20 +1,17 @@
 on:
   push:
     branches:
-      - master
+      - main
 
 permissions:
   contents: write
   pull-requests: write
   packages: write
 
 env:
-  # Use docker.io for Docker Hub if empty
-  REGISTRY: ghcr.io
-  # Image name MUST have a pattern like <org_name_lowercase>/<repo_name_lowercase>
-  IMAGE_NAME: phucvinh57/fastify-template
-  # username login to ghcr MUST be organization or personal name in lower case
-  CD_USERNAME: phucvinh57
+  REGISTRY: ${{vars.REGISTRY_NAME}}
+  IMAGE_NAME: ticklabvn/ssps-be
+  CD_USERNAME: ${{github.actor}}
 
 name: Release and deploy
 
@@ -31,74 +28,33 @@ jobs:
           release-type: node
           pull-request-header: "Bot (:robot:) requested to create a new release on ${{ github.ref_name }}"
 
-  ## Use if need to build package
-  # build:
-  #   name: Build
-  #   needs: [release]
-  #   runs-on: ubuntu-latest
-  #   if: ${{ needs.release.outputs.build == 'true' }}
-  #   steps:
-  #     - uses: actions/checkout@v3
-  #       name: Checkout repository
-
-  #     - name: Set up QEMU
-  #       uses: docker/setup-qemu-action@v2
-
-  #     - name: Setup Docker buildx
-  #       uses: docker/setup-buildx-action@v2
-  #       with:
-  #         version: v0.9.1
+  build:
+    name: Build
+    needs: [release]
+    runs-on: ubuntu-latest
+    if: ${{ needs.release.outputs.build == 'true' }}
+    steps:
+      - uses: actions/checkout@v3
+        name: Checkout repository
 
-  #     - name: Log into registry ${{ env.REGISTRY }}
-  #       uses: docker/login-action@v2
-  #       with:
-  #         registry: ${{ env.REGISTRY }}
-  #         username: ${{ env.CD_USERNAME }}
-  #         password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v2
 
-  #     - name: Build and push
-  #       uses: docker/build-push-action@v3
-  #       with:
-  #         context: .
-  #         push: true
-  #         tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ needs.release.outputs.tag_name }}
+      - name: Setup Docker buildx
+        uses: docker/setup-buildx-action@v2
+        with:
+          version: v0.9.1
 
-  ## Use if need to deploy on a server
-  # deploy:
-  #   name: Deploy
-  #   runs-on: ubuntu-latest
-  #   needs: [build]
-  #   env:
-  #     POSTGRES_URL: postgresql://${{ secrets.POSTGRES_USER }}:${{ secrets.POSTGRES_PASSWORD }}@postgres:5432/${{ secrets.POSTGRES_DB }}?schema=public
-  #   steps:
-  #     - name: Deploy
-  #       uses: appleboy/ssh-action@master
-  #       with:
-  #         host: ${{ secrets.VPS_HOST }}
-  #         port: ${{ secrets.VPS_PORT }}
-  #         username: ${{ secrets.VPS_USERNAME }}
-  #         password: ${{ secrets.VPS_PASSWORD }}
+      - name: Log into registry ${{ env.REGISTRY }}
+        uses: docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ env.CD_USERNAME }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
 
-  #         # TODO: Remove docker volumes in Dev stage only
-  #         script: |
-  #           export CR_PAT=${{ secrets.GITHUB_TOKEN }}
-  #           echo $CR_PAT | docker login ${{ env.REGISTRY }} -u ${{ env.CD_USERNAME }} --password-stdin
-  #           docker pull ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}
-
-  #           cd $HOME/thesis-222
-  #           rm -f .env
-  #           echo POSTGRES_USER=${{ secrets.POSTGRES_USER }} >> .env
-  #           echo POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }} >> .env
-  #           echo POSTGRES_DB=${{ secrets.POSTGRES_DB }} >> .env
-  #           echo POSTGRES_URL=${{ env.POSTGRES_URL }} >> .env
-  #           echo COOKIE_SECRET=${{ secrets.COOKIE_SECRET }} >> .env
-  #           echo JWT_SECRET=${{ secrets.JWT_SECRET }} >> .env
-  #           echo CORS_WHITE_LIST=${{ vars.CORS_WHITE_LIST }} >> .env
-
-  #           # curl https://raw.githubusercontent.com/phucvinh57/fastify-template/master/docker-compose.yml -o docker-compose.yml
-  #           docker-compose stop fastify
-  #           docker-compose rm -f fastify
-  #           docker-compose up -d fastify
-
-  #           docker logout ${{ env.REGISTRY }}
-
+      - name: Build and push
+        uses: docker/build-push-action@v3
+        with:
+          context: .
+          push: true
+          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ needs.release.outputs.tag_name }}         

.github/workflows/remove-test-deploy.yml

@@ -0,0 +1,45 @@
+on:
+  pull_request:
+    types:
+      - closed
+
+permissions:
+  contents: write
+  pull-requests: write
+  packages: write
+
+env: 
+  REGISTRY: ${{ vars.REGISTRY_NAME }}
+
+name: Remove test deploy
+
+jobs:
+  remove:
+    name: Remove test deploying
+    runs-on: ubuntu-latest
+
+    env:
+      TEST_DEPLOY_IMAGE_NAME: ticklabvn/ssps-be-test-deploy
+
+    if: github.event_name == 'pull_request' && github.event.action == 'closed' && github.event.pull_request.base.ref == 'staging'
+
+    steps:
+      - name: remove
+        uses: appleboy/ssh-action@master
+        with:
+          host: ${{ secrets.VPS_HOST }}
+          port: ${{ secrets.VPS_PORT }}
+          username: ${{ secrets.VPS_USERNAME }}
+          password: ${{ secrets.VPS_PASSWORD }}
+          script: |
+            # Remove the test deploy container, image, and folder
+            cd $HOME/${{ env.TEST_DEPLOY_IMAGE_NAME }}
+            if [ $? -eq 0 ]; then
+              docker compose -f docker-compose.test-deploy.yml down --volumes --remove-orphans
+              docker image rm -f ${{ env.REGISTRY }}/${{ env.TEST_DEPLOY_IMAGE_NAME }}:latest
+              rm -rf $HOME/${{ env.TEST_DEPLOY_IMAGE_NAME }}
+            else
+              echo "Could not change directory to $HOME/${{ env.TEST_DEPLOY_IMAGE_NAME }}. Skipping removal."
+            fi
+
+