ci: move to new infra

Author: Poizon7

.github/workflows/deploy.yml

@@ -8,21 +8,10 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
-
     steps:
-    - name: Git checkout
-      uses: actions/checkout@v4
-      with:
-        fetch-depth: 0
-
-    # See the following link for documentation:
-    # https://github.com/marketplace/actions/dokku
-    - name: Push to medusa
-      uses: dokku/[email protected]
-      with:
-        ssh_private_key: ${{ secrets.MEDUSA_GLOBAL_DEPLOY_KEY }}
-        git_remote_url: ssh://[email protected]/pandora
-        # force might feel risky, but there is no good reason why the server
-        # should ever not be a mirror of the deploy branch. And the errors we
-        # could get otherwise would probably be nasty to deal with
-        git_push_flags: --force
+      - name: Deploy to Nomad
+        uses: datasektionen/nomad-deploy@v1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          nomad-token: ${{ secrets.NOMAD_TOKEN }}
+          nomad-addr: ${{ vars.NOMAD_ADDR }}

Dockerfile

@@ -29,4 +29,4 @@ RUN ln -s _vendor vendor && chown -R www:www /app
 EXPOSE 8000
 
 USER root
-CMD ["/app/run.sh"]
+ENTRYPOINT ["sh", "-c", "php artisan serve --host=0.0.0.0 --port=$PORT"]

README.md

@@ -1,5 +1,8 @@
 # Pandora
 
+> [!WARNING]
+> Migrations not run in production env
+
 PHP Laravel application that handles bookings. Live at https://bokning.datasektionen.se.
 
 ## API

compose.yaml

@@ -19,6 +19,7 @@ services:
       - LOGIN_FRONTEND_URL=http://localhost:7002
       - PLS_API_URL=https://pls.datasektionen.se/api
       - HODIS_API_URL=https://hodis.datasektionen.se
+      - PORT=8000
     depends_on:
       db:
         condition: service_healthy

job.nomad.hcl

@@ -0,0 +1,59 @@
+ob "pandora" {
+  type = "service"
+
+  group "pandora" {
+    network {
+      port "http" { }
+    }
+
+    service {
+      name     = "pandora"
+      port     = "http"
+      provider = "nomad"
+      tags = [
+        "traefik.enable=true",
+        "traefik.http.routers.pandora.rule=Host(`bokning.datasektionen.se`)",
+        "traefik.http.routers.pandora.tls.certresolver=default",
+      ]
+    }
+
+    task "pandora" {
+      driver = "docker"
+
+      config {
+        image = var.image_tag
+        ports = ["http"]
+      }
+
+      template {
+        data        = <<ENV
+{{ with nomadVar "nomad/jobs/pandora" }}
+DATABASE_URL=postgres://pandora:{{ .db_password }}@postgres.dsekt.internal:5432/pandora
+APP_KEY={{ .app_key }}
+LOGIN_API_KEY={{ .login_api_key }}
+SPAM_API_KEY={{ .spam_api_key }}
+{{ end }}
+PORT={{ env "NOMAD_PORT_http" }}
+APP_DEBUG=false
+APP_ENV=production
+DB_CONNECTION=pgsql
+LOGIN_API_URL=https://login.datasektionen.se
+LOGIN_FRONTEND_URL=https://login.datasektionen.se
+PLS_API_URL=https://pls.datasektionen.se/api
+SPAM_API_URL=https://spam.datasektionen.se/api/sendmail
+ENV
+        destination = "local/.env"
+        env         = true
+      }
+
+      resources {
+        memory = 120
+      }
+    }
+  }
+}
+
+variable "image_tag" {
+  type = string
+  default = "ghcr.io/datasektionen/pandora:latest"
+}