3fc3a7456a
Setup PostHog côté SPA — pageviews TanStack Router + 10 events business (signup, login SSO, upload facture, émission/brouillon facture native, marquer payée, lancer relance, plan créé, checkout Stripe). PostHogProvider dans __root.tsx, identify sur auth, proxy nginx /ingest/* → eu.i.posthog.com pour contourner les adblockers. Token bake via build-arg CI (POSTHOG_PROJECT_TOKEN, à ajouter côté Gitea Secrets). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
95 lines
3.2 KiB
YAML
95 lines
3.2 KiB
YAML
name: Build & Deploy Web
|
|
|
|
# Workflow Web (React/Vite + nginx) — sert app.rubis.pro.
|
|
# Reverse-proxie /api/* vers le service ClusterIP rubis-api.
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
paths:
|
|
- 'apps/web/**'
|
|
- 'packages/shared/**'
|
|
- 'packages/ui/**'
|
|
- 'pnpm-lock.yaml'
|
|
- 'pnpm-workspace.yaml'
|
|
- 'package.json'
|
|
- 'tsconfig.base.json'
|
|
- 'turbo.json'
|
|
- 'Dockerfile.web'
|
|
- 'k3s/app/web.yml'
|
|
- '.gitea/workflows/deploy-web.yml'
|
|
|
|
env:
|
|
REGISTRY: git.arthurbarre.fr
|
|
IMAGE: ordinarthur/rubis-web
|
|
NAMESPACE: rubis
|
|
DEPLOYMENT: rubis-web
|
|
CONTAINER: web
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Login to Gitea Registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ${{ env.REGISTRY }}
|
|
username: ordinarthur
|
|
password: ${{ secrets.REGISTRY_PASSWORD }}
|
|
|
|
- name: Build and push Web image
|
|
uses: docker/build-push-action@v5
|
|
with:
|
|
context: .
|
|
file: Dockerfile.web
|
|
push: true
|
|
tags: |
|
|
${{ env.REGISTRY }}/${{ env.IMAGE }}:latest
|
|
${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ github.sha }}
|
|
cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.IMAGE }}:cache
|
|
cache-to: type=registry,ref=${{ env.REGISTRY }}/${{ env.IMAGE }}:cache,mode=max
|
|
# Vars Vite injectées dans le bundle au build time. Pour staging,
|
|
# créer un workflow séparé avec d'autres VITE_API_URL.
|
|
# Les VITE_SENTRY_* + SENTRY_* viennent des secrets CI Gitea
|
|
# (cf. README.md déploiement). Si SENTRY_AUTH_TOKEN est vide,
|
|
# le plugin Vite est skip et les sourcemaps ne sont pas uploadées.
|
|
build-args: |
|
|
VITE_API_URL=https://app.rubis.pro
|
|
VITE_PUBLIC_LANDING_URL=https://rubis.pro
|
|
VITE_USE_MOCKS=false
|
|
VITE_SENTRY_DSN_WEB=${{ secrets.SENTRY_DSN_WEB }}
|
|
VITE_APP_VERSION=${{ github.sha }}
|
|
SENTRY_AUTH_TOKEN=${{ secrets.SENTRY_AUTH_TOKEN }}
|
|
SENTRY_ORG=${{ secrets.SENTRY_ORG }}
|
|
VITE_PUBLIC_POSTHOG_PROJECT_TOKEN=${{ secrets.POSTHOG_PROJECT_TOKEN }}
|
|
VITE_PUBLIC_POSTHOG_HOST=https://eu.posthog.com
|
|
|
|
- name: Install kubectl
|
|
run: |
|
|
curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
|
|
chmod +x kubectl
|
|
mv kubectl /usr/local/bin/
|
|
|
|
- name: Deploy to K3s
|
|
run: |
|
|
mkdir -p ~/.kube
|
|
echo "${{ secrets.KUBECONFIG }}" | base64 -d > ~/.kube/config
|
|
chmod 600 ~/.kube/config
|
|
|
|
kubectl apply -f k3s/namespace.yml
|
|
|
|
kubectl -n $NAMESPACE create secret docker-registry gitea-registry \
|
|
--docker-server=$REGISTRY \
|
|
--docker-username=ordinarthur \
|
|
--docker-password=${{ secrets.REGISTRY_PASSWORD }} \
|
|
--dry-run=client -o yaml | kubectl apply -f -
|
|
|
|
kubectl apply -f k3s/app/web.yml
|
|
|
|
kubectl -n $NAMESPACE set image deployment/$DEPLOYMENT \
|
|
$CONTAINER=$REGISTRY/$IMAGE:${{ github.sha }}
|
|
|
|
kubectl -n $NAMESPACE rollout status deployment/$DEPLOYMENT --timeout=180s
|