asepharyana
c5a9371e71
- Replace upstream blocks with variable-based proxy_pass + Docker DNS resolver (127.0.0.11) so nginx resolves hostnames dynamically on each request instead of caching at startup only. - Add explicit 'docker compose restart proxy' in CI deploy step (belt-and-suspenders: also forces nginx restart after deploy). - Remove no-op sed commands from CI (docker-compose.yml already uses GitLab registry, no ghcr.io replacements needed). Root cause: docker compose up -d only recreates containers whose image changed. When backend container is recreated (new Docker IP), nginx still caches the old IP → 502 Bad Gateway on /api/*
137 lines
4.7 KiB
YAML
137 lines
4.7 KiB
YAML
# ─── BETE GitLab CI/CD Pipeline ───────────────────────────────────────────────
|
|
# 1. Build 4 Docker images (frontend, backend, discord-gateway, proxy)
|
|
# 2. Push to GitLab Container Registry
|
|
# 3. Deploy to VPS — pull images, docker compose up
|
|
#
|
|
# Required CI/CD Variables (set in GitLab → Settings → CI/CD → Variables):
|
|
#
|
|
# VPS_HOST - VPS IP/hostname
|
|
# VPS_USERNAME - SSH user
|
|
# VPS_SSH_KEY - SSH private key (type: file)
|
|
# ENV_FILE - Full .env file content (type: env_var) — optional if .env already on VPS
|
|
#
|
|
# ──────────────────────────────────────────────────────────────────────────────
|
|
|
|
stages:
|
|
- build
|
|
- deploy
|
|
|
|
variables:
|
|
# Submodules — discord.js-selfbot-v13 and discord-video-stream
|
|
GIT_SUBMODULE_STRATEGY: recursive
|
|
|
|
REGISTRY: $CI_REGISTRY
|
|
REGISTRY_PROJECT: $CI_REGISTRY/$CI_PROJECT_PATH
|
|
IMAGE_TAG_COMMIT: $CI_COMMIT_SHA
|
|
IMAGE_TAG_LATEST: latest
|
|
|
|
# Frontend build args
|
|
VITE_BE_API_URL: https://imphnen.asepharyana.my.id
|
|
VITE_BE_WS_URL: wss://imphnen.asepharyana.my.id
|
|
|
|
# Deploy target
|
|
SSH_HOST: "${VPS_USERNAME}@${VPS_HOST}"
|
|
APP_DIR: /opt/imphenbot
|
|
|
|
# ── Build stage ───────────────────────────────────────────────────────────────
|
|
.docker-build:
|
|
stage: build
|
|
image: docker:27-cli
|
|
services:
|
|
- name: docker:27-dind
|
|
command: ["--mtu=1400"]
|
|
before_script:
|
|
- echo "$CI_JOB_TOKEN" | docker login "$CI_REGISTRY" -u "$CI_REGISTRY_USER" --password-stdin
|
|
script:
|
|
# Build image
|
|
- |
|
|
docker build \
|
|
--file infra/docker/Dockerfile.$SERVICE_NAME \
|
|
--tag $REGISTRY_PROJECT/bete-$SERVICE_NAME:$IMAGE_TAG_COMMIT \
|
|
--tag $REGISTRY_PROJECT/bete-$SERVICE_NAME:$IMAGE_TAG_LATEST \
|
|
--build-arg BUILDKIT_INLINE_CACHE=1 \
|
|
--build-arg VITE_BE_API_URL=$VITE_BE_API_URL \
|
|
--build-arg VITE_BE_WS_URL=$VITE_BE_WS_URL \
|
|
--cache-from $REGISTRY_PROJECT/bete-$SERVICE_NAME:latest \
|
|
.
|
|
# Push to GitLab Container Registry
|
|
- docker push $REGISTRY_PROJECT/bete-$SERVICE_NAME:$IMAGE_TAG_COMMIT
|
|
- docker push $REGISTRY_PROJECT/bete-$SERVICE_NAME:$IMAGE_TAG_LATEST
|
|
|
|
build-frontend:
|
|
extends: .docker-build
|
|
variables:
|
|
SERVICE_NAME: frontend
|
|
only:
|
|
- master
|
|
|
|
build-backend:
|
|
extends: .docker-build
|
|
variables:
|
|
SERVICE_NAME: backend
|
|
only:
|
|
- master
|
|
|
|
build-discord-gateway:
|
|
extends: .docker-build
|
|
variables:
|
|
SERVICE_NAME: discord-gateway
|
|
only:
|
|
- master
|
|
|
|
build-proxy:
|
|
extends: .docker-build
|
|
variables:
|
|
SERVICE_NAME: proxy
|
|
only:
|
|
- master
|
|
|
|
# ── Deploy stage ──────────────────────────────────────────────────────────────
|
|
deploy-vps:
|
|
stage: deploy
|
|
image: debian:stable-slim
|
|
only:
|
|
- master
|
|
needs:
|
|
- build-frontend
|
|
- build-backend
|
|
- build-discord-gateway
|
|
- build-proxy
|
|
before_script:
|
|
- apt-get update -qq && apt-get install -y -qq openssh-client
|
|
- mkdir -p ~/.ssh
|
|
- cp "$VPS_SSH_KEY" ~/.ssh/id_rsa
|
|
- chmod 600 ~/.ssh/id_rsa
|
|
- ssh-keyscan -H "$VPS_HOST" >> ~/.ssh/known_hosts 2>/dev/null
|
|
script:
|
|
# Login to GitLab Container Registry, pull images, update docker-compose, restart
|
|
- |
|
|
ssh "$SSH_HOST" "
|
|
set -eu
|
|
|
|
cd $APP_DIR
|
|
|
|
echo '→ Logging in to GitLab Container Registry...'
|
|
echo '$CI_JOB_TOKEN' | docker login $CI_REGISTRY -u '$CI_REGISTRY_USER' --password-stdin
|
|
|
|
echo '→ Updating docker-compose image references...'
|
|
echo '→ Pulling latest images...'
|
|
docker compose -f infra/docker/docker-compose.yml pull
|
|
|
|
echo '→ Restarting containers (recreates if image changed)...'
|
|
docker compose -f infra/docker/docker-compose.yml up -d --remove-orphans
|
|
|
|
# Force restart proxy to pick up new upstream DNS IPs.
|
|
# Docker's DNS changes when backend/frontend containers are recreated,
|
|
# but nginx only resolves upstream hostnames at startup. Without this,
|
|
# nginx keeps pointing to stale container IPs → 502 Bad Gateway.
|
|
echo '→ Ensuring proxy container is restarted (nginx upstream DNS refresh)...'
|
|
docker compose -f infra/docker/docker-compose.yml restart proxy
|
|
|
|
echo '→ Cleaning up...'
|
|
docker image prune -f
|
|
echo '✓ Deploy complete'
|
|
"
|
|
after_script:
|
|
- rm -f ~/.ssh/id_rsa
|