searchengine/.forgejo/workflows/beta.yml

name: Deploy Beta (NATIVE)

on:
  push:
    branches:
      - beta

jobs:
  deploy:
    runs-on: ubuntu-latest
    container:
      image: node:22-alpine
    steps:
      - name: Install git
        run: apk add --no-cache git

      - name: Checkout Code
        uses: https://github.com/actions/checkout@v4

      - name: Generate CloudWatch and Nginx Configs Locally
        run: |
          mkdir -p tmp
          cat << 'EOF' > tmp/amazon-cloudwatch-agent.json
          {
            "agent": { "metrics_collection_interval": 60, "run_as_user": "root" },
            "metrics": {
              "metrics_collected": {
                "disk": { "measurement": ["used_percent"], "metrics_collection_interval": 60, "resources": ["/"] },
                "mem":  { "measurement": ["mem_used_percent"], "metrics_collection_interval": 60 }
              }
            },
            "logs": {
              "logs_collected": {
                "files": {
                  "collect_list": [
                    { "file_path": "/home/ubuntu/searchengine/logs/app.log",      "log_group_name": "/searchengine/app",      "log_stream_name": "{instance_id}", "retention_in_days": 30 },
                    { "file_path": "/home/ubuntu/searchengine/logs/error.log",    "log_group_name": "/searchengine/error",    "log_stream_name": "{instance_id}", "retention_in_days": 30 },
                    { "file_path": "/home/ubuntu/searchengine/logs/requests.log", "log_group_name": "/searchengine/requests", "log_stream_name": "{instance_id}", "retention_in_days": 30 },
                    { "file_path": "/home/ubuntu/searchengine/logs/gunicorn-access.log", "log_group_name": "/searchengine/gunicorn-access", "log_stream_name": "{instance_id}", "retention_in_days": 30 },
                    { "file_path": "/home/ubuntu/searchengine/logs/gunicorn-error.log",  "log_group_name": "/searchengine/gunicorn-error",  "log_stream_name": "{instance_id}", "retention_in_days": 30 }
                  ]
                }
              }
            }
          }
          EOF
          cat << 'EOF' > tmp/nginx-proxy.conf
          server {
              server_name betasearch-api.tradhox.com search-api.tradhox.com;
              
              location / {
                  proxy_pass http://127.0.0.1:8087;
                  proxy_set_header Host $host;
                  proxy_set_header X-Real-IP $remote_addr;
                  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                  proxy_set_header X-Forwarded-Proto $scheme;
              }

              listen 443 ssl;
              ssl_certificate /etc/letsencrypt/live/betapartner-api.tradhox.com/fullchain.pem;
              ssl_certificate_key /etc/letsencrypt/live/betapartner-api.tradhox.com/privkey.pem;
              include /etc/letsencrypt/options-ssl-nginx.conf;
              ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
          }

          server {
              listen 80;
              server_name betasearch-api.tradhox.com search-api.tradhox.com;
              return 301 https://$host$request_uri;
          }
          EOF          

      - name: Package Application
        run: |
          tar -czf app.tar.gz --exclude=.git --exclude=tmp .          

      - name: Deploy to Beta EC2
        run: |
          apk add --no-cache openssh-client aws-cli
          mkdir -p ~/.ssh
          echo "${{ secrets.BETA_EC2_SSH_KEY }}" > ~/.ssh/id_rsa
          chmod 600 ~/.ssh/id_rsa

          # Copy app archive and configuration files
          scp -o StrictHostKeyChecking=no -i ~/.ssh/id_rsa app.tar.gz tmp/amazon-cloudwatch-agent.json tmp/nginx-proxy.conf searchengine.service ${{ secrets.BETA_EC2_USERNAME }}@${{ secrets.BETA_EC2_HOST }}:/tmp/

          # Execute deployment commands on remote server
          ssh -o StrictHostKeyChecking=no -i ~/.ssh/id_rsa ${{ secrets.BETA_EC2_USERNAME }}@${{ secrets.BETA_EC2_HOST }} << 'EOF'
            set -e

            # ── 1. Install Host Dependencies ──────────────────────────────
            sudo apt-get update
            sudo apt-get install -y python3-pip python3-venv python3-dev pkg-config libpq-dev build-essential nginx

            # ── 2. Install Typesense Server Binary if not present ──────────
            if ! command -v typesense-server &> /dev/null; then
              echo "Installing Typesense Server v27.1..."
              curl -O https://dl.typesense.org/releases/27.1/typesense-server-27.1-amd64.deb
              sudo dpkg -i typesense-server-27.1-amd64.deb
              rm typesense-server-27.1-amd64.deb
            fi

            # Ensure Typesense directory & config exists
            sudo mkdir -p /var/lib/typesense
            cat << 'TYPESENSE_CONF' | sudo tee /etc/typesense/typesense-server.ini
            api-key = vignesh_typesense_master_key_2026
            data-dir = /var/lib/typesense
            log-dir = /var/log/typesense
            api-port = 8108
            listen-address = 127.0.0.1
            TYPESENSE_CONF

            sudo systemctl enable typesense-server
            sudo systemctl restart typesense-server || true

            # ── 3. Extract codebase to target directory ───────────────────
            sudo mkdir -p /home/ubuntu/searchengine
            sudo chown -R ubuntu:ubuntu /home/ubuntu/searchengine
            tar -xzf /tmp/app.tar.gz -C /home/ubuntu/searchengine

            # ── 4. Set up python virtual environment & dependencies ────────
            cd /home/ubuntu/searchengine
            python3 -m venv venv
            source venv/bin/activate
            pip install --upgrade pip
            pip install -r requirements.txt

            # ── 5. Systemd Service Deployment ──────────────────────────────
            sudo cp /tmp/searchengine.service /etc/systemd/system/searchengine.service
            sudo systemctl daemon-reload
            sudo systemctl enable searchengine.service
            sudo systemctl restart searchengine.service

            # ── 6. Nginx Config ───────────────────────────────────────────
            sudo cp /tmp/nginx-proxy.conf /etc/nginx/sites-available/searchengine
            sudo ln -sf /etc/nginx/sites-available/searchengine /etc/nginx/sites-enabled/searchengine
            sudo nginx -t && sudo systemctl reload nginx

            # ── 7. CloudWatch Agent Config ────────────────────────────────
            sudo mkdir -p /opt/aws/amazon-cloudwatch-agent/etc/
            sudo cp /tmp/amazon-cloudwatch-agent.json /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.json
            sudo systemctl restart amazon-cloudwatch-agent || true

            echo "searchengine microservice successfully deployed!"
          EOF