create-turbo-mono 1.0.0

package/src/templates/cicd.ts

@@ -0,0 +1,334 @@
+import fs from 'fs-extra';
+import path from 'path';
+import { ProjectConfig } from '../scaffold';
+
+export async function createCICDFiles(config: ProjectConfig): Promise<void> {
+  const { targetDir, backends, frontends } = config;
+
+  await fs.ensureDir(path.join(targetDir, '.github', 'workflows'));
+  await fs.ensureDir(path.join(targetDir, 'scripts'));
+
+  await createGitHubWorkflow(targetDir, backends, frontends);
+  await createDeployScript(targetDir, backends, frontends);
+  await createRollbackScript(targetDir, backends, frontends);
+  await createEnvExample(targetDir);
+}
+
+async function createGitHubWorkflow(
+  targetDir: string,
+  backends: string[],
+  frontends: string[]
+): Promise<void> {
+  const services = [...backends, ...frontends];
+  const matrixServices = services.map((s) => `'${s}'`).join(', ');
+
+  // Using template literals with escaped ${ for GitHub Actions syntax
+  const workflow = `name: CI/CD (main)
+
+on:
+  push:
+    branches: ['main']
+  pull_request:
+    branches: ['main']
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: \${{ github.repository }}
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    strategy:
+      fail-fast: false
+      matrix:
+        service: [${matrixServices}]
+
+    steps:
+      - name: 📥 Checkout repository
+        uses: actions/checkout@v4
+
+      - name: 🐳 Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: 🏗️ Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: 🔐 Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: \${{ env.REGISTRY }}
+          username: \${{ github.actor }}
+          password: \${{ secrets.GITHUB_TOKEN }}
+
+      - name: 🏷️ Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: \${{ env.REGISTRY }}/\${{ env.IMAGE_NAME }}/\${{ matrix.service }}
+          tags: |
+            type=ref,event=branch
+            type=ref,event=pr
+            type=sha,prefix={{branch}}-
+            type=raw,value=latest,enable={{is_default_branch}}
+
+      - name: 🔨 Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: Dockerfile
+          target: \${{ matrix.service }}-production
+          push: \${{ github.event_name != 'pull_request' }}
+          tags: \${{ steps.meta.outputs.tags }}
+          labels: \${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  deploy:
+    needs: [build-and-push]
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+
+    steps:
+      - name: 📥 Checkout repository
+        uses: actions/checkout@v4
+
+      - name: 🏷️ Compute deployment tag
+        id: tag
+        run: echo "TAG=\${GITHUB_SHA::7}" >> $GITHUB_OUTPUT
+
+      - name: 🚀 Deploy to server
+        uses: appleboy/ssh-action@v1.0.0
+        env:
+          TAG: \${{ steps.tag.outputs.TAG }}
+          APP_DIR: \${{ secrets.DEPLOY_PATH }}
+        with:
+          host: \${{ secrets.SSH_HOST }}
+          username: \${{ secrets.SSH_USER }}
+          key: \${{ secrets.SSH_KEY }}
+          port: \${{ secrets.SSH_PORT || 22 }}
+          script_stop: true
+          envs: TAG,APP_DIR
+          script: |
+            set -euo pipefail
+            echo "📦 Deploying tag: \${TAG}"
+            echo "📁 APP_DIR: \${APP_DIR}"
+            cd "\${APP_DIR}"
+            chmod +x scripts/deploy.sh
+            ./scripts/deploy.sh "\${TAG}"
+
+      - name: ✉️ Send deployment notification
+        if: always()
+        uses: dawidd6/action-send-mail@v3
+        with:
+          server_address: \${{ secrets.SMTP_SERVER }}
+          server_port: \${{ secrets.SMTP_PORT }}
+          secure: \${{ secrets.SMTP_SECURE }}
+          username: \${{ secrets.SMTP_USERNAME }}
+          password: \${{ secrets.SMTP_PASSWORD }}
+          subject: 'Deployment #\${{ github.run_number }} - \${{ job.status }}'
+          from: 'CI/CD <\${{ secrets.SMTP_USERNAME }}>'
+          to: \${{ secrets.DEPLOY_NOTIFY_TO }}
+          html_body: |
+            <div style="font-family:'Segoe UI',Helvetica,Arial,sans-serif;background:#f6f8fa;padding:20px;">
+              <div style="max-width:600px;margin:0 auto;background:#fff;border-radius:10px;box-shadow:0 2px 6px rgba(0,0,0,0.1);overflow:hidden;">
+                <div style="background:linear-gradient(90deg,#2563eb,#1e3a8a);padding:16px 24px;color:#fff;">
+                  <h2 style="margin:0;font-size:20px;">🚀 Deployment Notification</h2>
+                </div>
+                <div style="padding:24px;">
+                  <table style="width:100%;border-collapse:collapse;margin-top:8px;">
+                    <tr><td style="padding:6px 0;color:#555;font-weight:600;">Repository</td><td>\${{ github.repository }}</td></tr>
+                    <tr style="background:#f9fafb;"><td style="padding:6px 0;color:#555;font-weight:600;">Branch</td><td>\${{ github.ref_name }}</td></tr>
+                    <tr><td style="padding:6px 0;color:#555;font-weight:600;">Commit</td><td><code>\${{ github.sha }}</code></td></tr>
+                    <tr style="background:#f9fafb;"><td style="padding:6px 0;color:#555;font-weight:600;">Tag</td><td>\${{ steps.tag.outputs.TAG }}</td></tr>
+                    <tr><td style="padding:6px 0;color:#555;font-weight:600;">Status</td>
+                      <td><span style="padding:3px 8px;border-radius:6px;background:#2563eb;color:#fff;font-size:12px;">\${{ job.status }}</span></td></tr>
+                  </table>
+                  <p style="margin:16px 0 8px;color:#444;">View full deployment logs:</p>
+                  <a href="\${{ github.server_url }}/\${{ github.repository }}/actions/runs/\${{ github.run_id }}"
+                     style="display:inline-block;background:#2563eb;color:#fff;padding:10px 16px;border-radius:6px;text-decoration:none;font-weight:500;">🔍 View Details</a>
+                  <p style="margin-top:20px;font-size:12px;color:#888;">— DevOps Pipeline</p>
+                </div>
+              </div>
+            </div>
+`;
+
+  await fs.writeFile(
+    path.join(targetDir, '.github', 'workflows', 'ci-cd.yml'),
+    workflow
+  );
+}
+
+async function createDeployScript(
+  targetDir: string,
+  backends: string[],
+  frontends: string[]
+): Promise<void> {
+  const services = [...backends, ...frontends].join(' ');
+
+  const deployScript = `#!/usr/bin/env bash
+set -euo pipefail
+
+APP_DIR="\${APP_DIR:-/home/$(whoami)/app}"
+COMPOSE_FILE="docker-compose.prod.yml"
+PROJECT_NAME="\${PROJECT_NAME:-app}"
+
+TAG="\${1:-}"
+if [[ -z "\${TAG}" ]]; then
+  echo "❌ Usage: ./scripts/deploy.sh <tag>"
+  exit 1
+fi
+
+echo "🚀 Deploying tag \${TAG} in \${APP_DIR}"
+cd "\${APP_DIR}"
+
+export RELEASE_TAG="\${TAG}"
+
+# Keep a pointer to the previous tag for rollback
+if [[ -f .current_release_tag ]]; then
+  cp .current_release_tag .prev_release_tag
+fi
+echo "\${TAG}" > .current_release_tag
+
+# 1) Pull latest images
+echo "📥 Pulling images for tag \${TAG}..."
+docker compose -f "\${COMPOSE_FILE}" pull ${services}
+
+# 2) Run database migrations
+echo "🧩 Running database migrations..."
+FIRST_BACKEND="${backends[0]}"
+if ! docker compose -f "\${COMPOSE_FILE}" run --rm \${FIRST_BACKEND} sh -c 'pnpm prisma migrate deploy'; then
+  echo "❌ Migration failed. Rolling back to previous tag..."
+  if [[ -f .prev_release_tag ]]; then
+    ./scripts/rollback.sh
+  fi
+  exit 1
+fi
+
+# 3) Start/Update services
+echo "🔄 Starting containers..."
+docker compose -f "\${COMPOSE_FILE}" up -d ${services}
+
+# 4) Wait for services to be healthy
+echo "🔍 Waiting for services to be healthy..."
+for SERVICE in ${services}; do
+  CONTAINER_NAME="\${PROJECT_NAME}-\${SERVICE}"
+  for i in {1..30}; do
+    STATUS="$(docker inspect --format '{{json .State.Health.Status}}' "\${CONTAINER_NAME}" 2>/dev/null | tr -d '"')" || true
+    if [[ "\${STATUS}" == "healthy" ]] || [[ -z "\${STATUS}" ]]; then
+      echo "✅ \${SERVICE} is healthy"
+      break
+    fi
+    if [[ \${i} -eq 30 ]]; then
+      echo "⚠️  \${SERVICE} did not become healthy (timeout)"
+    fi
+    sleep 3
+  done
+done
+
+# 5) Cleanup old images
+echo "🧹 Cleaning up old images..."
+docker image prune -f
+
+echo "✅ Deployment successful for tag \${TAG}"
+echo "📊 Running services:"
+docker compose -f "\${COMPOSE_FILE}" ps
+`;
+
+  await fs.writeFile(path.join(targetDir, 'scripts', 'deploy.sh'), deployScript, {
+    mode: 0o755,
+  });
+}
+
+async function createRollbackScript(
+  targetDir: string,
+  backends: string[],
+  frontends: string[]
+): Promise<void> {
+  const services = [...backends, ...frontends].join(' ');
+
+  const rollbackScript = `#!/usr/bin/env bash
+set -euo pipefail
+
+APP_DIR="\${APP_DIR:-/home/$(whoami)/app}"
+COMPOSE_FILE="docker-compose.prod.yml"
+
+cd "\${APP_DIR}"
+
+if [[ ! -f .prev_release_tag ]]; then
+  echo "❌ No .prev_release_tag found; cannot rollback."
+  exit 1
+fi
+
+export RELEASE_TAG="$(cat .prev_release_tag)"
+echo "🔄 Rolling back to \${RELEASE_TAG}"
+
+# Pull previous images
+echo "📥 Pulling images for tag \${RELEASE_TAG}..."
+docker compose -f "\${COMPOSE_FILE}" pull ${services}
+
+# Restart services
+echo "🔄 Restarting services..."
+docker compose -f "\${COMPOSE_FILE}" up -d ${services}
+
+# Swap tag pointers
+cp .prev_release_tag .current_release_tag
+
+echo "✅ Rolled back to \${RELEASE_TAG}"
+echo "📊 Running services:"
+docker compose -f "\${COMPOSE_FILE}" ps
+`;
+
+  await fs.writeFile(
+    path.join(targetDir, 'scripts', 'rollback.sh'),
+    rollbackScript,
+    { mode: 0o755 }
+  );
+}
+
+async function createEnvExample(targetDir: string): Promise<void> {
+  const envExample = `# Project Configuration
+PROJECT_NAME=my-app
+GITHUB_REPOSITORY=your-org/your-repo
+
+# Database Configuration
+DATABASE_USER=postgres
+DATABASE_PASSWORD=postgres
+DATABASE_NAME=app_db
+DATABASE_PORT=5432
+DATABASE_URL=postgresql://\${DATABASE_USER}:\${DATABASE_PASSWORD}@postgres:5432/\${DATABASE_NAME}
+
+# Redis Configuration
+REDIS_URL=redis://redis:6379
+REDIS_PORT=6379
+
+# Application Ports
+# Backend services will use 4000+
+# Frontend services will use 3000+
+
+# Production Deployment
+RELEASE_TAG=latest
+
+# API Configuration
+NEXT_PUBLIC_API_URL=http://localhost:4000
+
+# Email Notifications (for CI/CD)
+# SMTP_SERVER=smtp.gmail.com
+# SMTP_PORT=587
+# SMTP_SECURE=true
+# SMTP_USERNAME=your-email@gmail.com
+# SMTP_PASSWORD=your-app-password
+# DEPLOY_NOTIFY_TO=team@example.com
+
+# Deployment Server (for CI/CD)
+# SSH_HOST=your-server.com
+# SSH_USER=deploy
+# SSH_KEY=<your-private-key>
+# SSH_PORT=22
+# DEPLOY_PATH=/home/deploy/app
+`;
+
+  await fs.writeFile(path.join(targetDir, '.env.example'), envExample);
+}