deploy.yml

name: Deploy to Production

on:
  push:
    branches: [main, dev]
  workflow_dispatch:

concurrency:
  group: deploy-production
  cancel-in-progress: false

jobs:
  checks:
    name: Checks
    runs-on: ubuntu-latest
    services:
      postgres:
        image: postgres:16
        env:
          POSTGRES_USER: openlinear
          POSTGRES_PASSWORD: openlinear
          POSTGRES_DB: openlinear_test
        ports:
          - 5432:5432
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5
    env:
      DATABASE_URL: postgresql://openlinear:openlinear@localhost:5432/openlinear_test
    steps:
      - uses: actions/checkout@v4

      - uses: pnpm/action-setup@v4

      - uses: actions/setup-node@v4
        with:
          node-version: 22
          cache: pnpm

      - run: pnpm install --frozen-lockfile

      - name: Generate Prisma client
        run: pnpm --filter @openlinear/db db:generate

      - name: Push schema to test database
        run: pnpm --filter @openlinear/db db:push

      - name: Typecheck
        run: pnpm --filter @openlinear/api typecheck
        continue-on-error: true

      - name: Build API
        run: pnpm --filter @openlinear/api build
        continue-on-error: true

      - name: Build Web
        run: pnpm --filter @openlinear/desktop-ui build
        continue-on-error: true
        env:
          NEXT_PUBLIC_API_URL: https://rixie.in

      - name: Build Landing
        run: pnpm --filter @openlinear/landing build
        continue-on-error: true

      - name: Test
        run: pnpm --filter @openlinear/api test
        continue-on-error: true

  deploy:
    name: Deploy
    needs: checks
    runs-on: ubuntu-latest
    environment: production
    steps:
      - name: Deploy to droplet
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.DEPLOY_HOST }}
          username: ${{ secrets.DEPLOY_USER }}
          key: ${{ secrets.DEPLOY_SSH_KEY }}
          command_timeout: 15m
          script: |
            set -e
            export CI=true
            cd /opt/openlinear && git reset --hard HEAD
            /opt/openlinear/scripts/deploy.sh

      - name: Diagnostics (pm2 + port + local health)
        if: ${{ always() }}
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.DEPLOY_HOST }}
          username: ${{ secrets.DEPLOY_USER }}
          key: ${{ secrets.DEPLOY_SSH_KEY }}
          command_timeout: 2m
          script: |
            set -e
            echo "== pm2 show =="
            pm2 show openlinear-api || true
            pm2 show openlinear-web || true
            echo "== port 3001 listener =="
            (command -v ss >/dev/null 2>&1 && ss -ltnp | grep ':3001' && exit 0) || true
            (command -v lsof >/dev/null 2>&1 && lsof -iTCP:3001 -sTCP:LISTEN -nP && exit 0) || true
            echo "== localhost health =="
            curl -sS -D- -o /dev/null --max-time 5 http://localhost:3001/health || true
            echo "== localhost web =="
            curl -sS -D- -o /dev/null --max-time 10 http://localhost:3000/ || true

      - name: Verify deployment
        run: |
          sleep 30
          HTTP_STATUS=$(curl -s -o /dev/null -w '%{http_code}' https://rixie.in/health)
          if [ "$HTTP_STATUS" = "200" ]; then
            echo "✓ Deployment verified — health check returned $HTTP_STATUS"
          else
            echo "✗ Health check failed — returned $HTTP_STATUS"
            exit 1
          fi