# docker-compose.yml

# 1. Base Image
services:
  mysql:
    image: mysql:<MYSQL_VERSION>

    # 2. 초기 실행 환경 주입
    environment:
      MYSQL_DATABASE: ${MYSQL_DATABASE}
      MYSQL_USER: ${MYSQL_USER}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}

    # 3. 데이터와 초기화 파일 연결
    volumes:
      - mysql-data:/var/lib/mysql
      - ./db/init:/docker-entrypoint-initdb.d:ro

name: Opend Issue Notification # 1
on: # 2
  issues:
    types:
      - opened 

jobs: 
  create-issue:
    name: Discord notification 
    runs-on: ubuntu-latest 
    steps:
      - name: Send Issue
        uses: Ilshidur/[email protected] # 3
        env:
          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }} # 4
          DISCORD_USERNAME: WAPP_BOT # 5
          DISCORD_AVATAR: https://github.com/pknu-wap/WAPP/blob/main/image/icon.png?raw=true # 6
          DISCORD_EMBEDS: |  # 7
            [
                { 
                  "title": "🚨 긴급 이슈 알림\n${{ github.event.issue.title }}",
                  "color": 10478271,
                  "description": "${{ github.event.issue.html_url }}",
                  "fields": [
                    {
                      "name": "Issue Number",
                      "value": "#${{ github.event.issue.number }}",
                      "inline": true
                    },
                    {
                      "name": "Author",
                      "value": "${{ github.event.issue.user.login }}",
                      "inline": true
                    }
                  ]
                }
              ]

# next build 는 아래 Docker 빌드에서 수행되므로 별도 build 스텝을 두지 않는다.
#
# FE CI 의 책임은 dev-/rc- 이미지 생성까지다.
# 정식 출시 태그(prod-vX.Y.Z-<sha7>)는 "재빌드 없이 동일 Digest" 정책에 따라
# Cloud(CD) 레포에서 생성한다. CD 는 rc-vX.Y.Z- prefix 로 ECR 을 조회해
# 해당 버전의 rc 이미지를 찾은 뒤 prod- 태그로 재태깅한다.
- name: Resolve image tag
  id: meta
  run: |
    set -Eeuo pipefail

    if [[ "$GITHUB_REF_NAME" == develop ]]; then
      image_tag="dev-${GITHUB_SHA:0:7}"
      release_version=""
      push_image=true
    elif [[ "$GITHUB_REF_NAME" == release/* ]]; then
      version="${GITHUB_REF_NAME#release/}"
      [[ "$version" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]
      image_tag="rc-${version}-${GITHUB_SHA:0:7}"
      release_version="$version"
      push_image=true
    elif [[ "$GITHUB_REF_NAME" == hotfix/* ]]; then
      image_tag="hf-${GITHUB_SHA:0:7}"
      release_version=""
      push_image=false
    else
      image_tag="pr-${GITHUB_SHA:0:7}"
      release_version=""
      push_image=false
    fi

    {
      echo "image_tag=$image_tag"
      echo "release_version=$release_version"
      echo "push_image=$push_image"
      echo "build_date=$(date -u +%Y-%m-%dT%H:%M:%SZ)"
    } >> "$GITHUB_OUTPUT"

- name: Configure AWS credentials
  if: steps.meta.outputs.push_image == 'true'
  uses: aws-actions/configure-aws-credentials@v4
  with:
    aws-region: ${{ env.AWS_REGION }}
    role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
    role-session-name: fe-ci-${{ github.run_id }}

- name: Login to ECR
  if: steps.meta.outputs.push_image == 'true'
  uses: aws-actions/amazon-ecr-login@v2

- name: Push image
  if: steps.meta.outputs.push_image == 'true'
  env:
    IMAGE_TAG: ${{ steps.meta.outputs.image_tag }}
  run: |
    set -Eeuo pipefail

    remote_image="${ECR_REGISTRY}/${ECR_REPOSITORY}:${IMAGE_TAG}"

    docker tag "${IMAGE_NAME}:${IMAGE_TAG}" "$remote_image"
    docker push "$remote_image"

name: FE CI

on:
  # PR 은 검증만 수행하고 ECR push 와 배포는 하지 않는다.
  # hotfix/* 는 main 으로 PR 을 보내므로 아래 main 대상 PR 에 포함된다.
  pull_request:
    branches:
      - develop
      - main

  # develop, main 로의 직접 push 는 branch protection 으로 차단되므로
  # 이 이벤트는 사실상 "PR 이 병합되어 ref 가 전진했을 때"의 push 를 의미한다.
  push:
    branches:
      - develop
      - main

  workflow_dispatch:

  - name: Install dependencies
    run: pnpm install --frozen-lockfile

env:
  AWS_REGION: ${{ vars.AWS_REGION }}
  ECR_REGISTRY: ${{ vars.ECR_REGISTRY }}
  ECR_REPOSITORY: ${{ vars.ECR_REPOSITORY }}
  IMAGE_NAME: moyeota-fe
  NEXT_PUBLIC_API_BASE_URL: ${{ vars.NEXT_PUBLIC_API_BASE_URL }}
  NEXT_PUBLIC_GA_ID: ${{ vars.NEXT_PUBLIC_GA_ID }}
  NEXT_PUBLIC_SENTRY_DSN: ${{ vars.NEXT_PUBLIC_SENTRY_DSN }}
  NEXT_PUBLIC_SENTRY_ENVIRONMENT: ${{ vars.NEXT_PUBLIC_SENTRY_ENVIRONMENT }}
  NEXT_PUBLIC_SENTRY_TRACES_SAMPLE_RATE: ${{ vars.NEXT_PUBLIC_SENTRY_TRACES_SAMPLE_RATE }}

  - name: Run oxlint
    run: pnpm lint

  - name: Unit test
    run: pnpm test

- name: Run Chromatic
  if: github.event_name == 'merge'
  run: pnpm run chromatic
  env:
    CHROMATIC_PROJECT_TOKEN: ${{ secrets.CHROMATIC_PROJECT_TOKEN }}

- name: Build Docker image
  run: |
    set -Eeuo pipefail

    docker_build_args=()
    if [[ -n "${SENTRY_AUTH_TOKEN:-}" ]]; then
      docker_build_args+=(--secret "id=sentry_auth_token,env=SENTRY_AUTH_TOKEN")
    fi

    DOCKER_BUILDKIT=1 docker build \
      --file Dockerfile \
      --tag "${IMAGE_NAME}:${IMAGE_TAG}" \
      --build-arg "BUILD_SHA=${GITHUB_SHA}" \
      --build-arg "RELEASE_VERSION=${{ steps.meta.outputs.release_version }}" \
      --build-arg "BUILD_DATE=${{ steps.meta.outputs.build_date }}" \
      --build-arg "SENTRY_ORG=${SENTRY_ORG:-}" \
      --build-arg "SENTRY_PROJECT=${SENTRY_PROJECT:-}" \
      --build-arg "NEXT_PUBLIC_API_BASE_URL=${NEXT_PUBLIC_API_BASE_URL:-}" \
      --build-arg "NEXT_PUBLIC_GA_ID=${NEXT_PUBLIC_GA_ID:-}" \
      --build-arg "NEXT_PUBLIC_SENTRY_DSN=${NEXT_PUBLIC_SENTRY_DSN:-}" \
      --build-arg "NEXT_PUBLIC_SENTRY_ENVIRONMENT=${NEXT_PUBLIC_SENTRY_ENVIRONMENT:-}" \
      --build-arg "NEXT_PUBLIC_SENTRY_TRACES_SAMPLE_RATE=${NEXT_PUBLIC_SENTRY_TRACES_SAMPLE_RATE:-}" \
      "${docker_build_args[@]}" \

name: CI Failure Notification

on:
  workflow_run:
    workflows:
      - FE CI
    types:
      - completed

permissions:
  actions: read

jobs:
  notify:
    name: Discord notification
    if: ${{ github.event.workflow_run.conclusion == 'failure' }}
    runs-on: ubuntu-latest
    steps:
      - name: Build CI failure embed
        uses: actions/github-script@v7
        with:
          script: |
            const run = context.payload.workflow_run;

            const embeds = [
              {
                title: `❌ CI 실패 알림\n${run.name}`,
                color: 15158332,
                description: run.html_url,
                fields: [
                  {
                    name: 'Branch',
                    value: run.head_branch || '-',
                    inline: true,
                  },
                  {
                    name: 'Event',
                    value: run.event || '-',
                    inline: true,
                  },
                  {
                    name: 'Actor',
                    value: run.actor?.login || '-',
                    inline: true,
                  },
                  {
                    name: 'Commit',
                    value: run.head_sha ? run.head_sha.slice(0, 7) : '-',
                    inline: true,
                  },
                ],
              },
            ];

            core.exportVariable('DISCORD_EMBEDS', JSON.stringify(embeds));

      - name: Send CI failure notification
        uses: Ilshidur/[email protected]
        env:
          DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
          DISCORD_USERNAME: WAPP_BOT
          DISCORD_AVATAR: https://github.com/pknu-wap/WAPP/blob/main/image/icon.png?raw=true

on:
  # PR 은 검증만 수행하고 ECR push 와 배포는 하지 않는다.
  # hotfix/* 는 main 으로 PR 을 보내므로 아래 main 대상 PR 에 포함된다.
  pull_request:
    branches:
      - develop
      - main
      - 'release/**'

  # develop, release/* 로의 직접 push 는 branch protection 으로 차단되므로
  # 이 이벤트는 사실상 "PR 이 병합되어 ref 가 전진했을 때"의 push 를 의미한다.
  push:
    branches:
      - develop
      - 'release/**'

- name:  Install dependencies and run unit tests
  run: ./gradlew --no-daemon test

env:
  AWS_REGION: ${{ vars.AWS_REGION }}
  ECR_REGISTRY: ${{ vars.ECR_REGISTRY }}
  ECR_REPOSITORY: ${{ vars.ECR_REPOSITORY }}

- name: Build Docker image
  run: |
    set -Eeuo pipefail

    DOCKER_BUILDKIT=1 docker build \
      --file Dockerfile \
      --tag "moyeota-be:${IMAGE_TAG}" \
      --build-arg "BUILD_SHA=${GITHUB_SHA}" \
      --build-arg "RELEASE_VERSION=${RELEASE_VERSION}" \
      --build-arg "BUILD_DATE=${BUILD_DATE}" \
      --label "org.opencontainers.image.revision=${GITHUB_SHA}" \
      --cache-from "type=gha,scope=be-${GITHUB_REF_NAME}" \
      --cache-to "type=gha,mode=max,scope=be-${GITHUB_REF_NAME}" \
      --load \
      .