deblan.io-murph/.woodpecker/build.yml

variables:
  volumes: &volumes
    - node_cache:/root/.npm
    - /data/${CI_REPO}:/builds

when:
  event: [push, pull_request, tag, manual]
  branch: [master, master-*, develop, develop-*, feature/*]

steps:
  db-wait:
    image: gitnet.fr/deblan/timeout:latest
    commands:
      - /bin/timeout -t 30 -v -c 'while true; do nc -z -v db 3306 2>&1 | grep succeeded && exit 0; sleep 0.5; done'

  secrets:
    image: gitnet.fr/deblan/novops
    secrets: [vault_addr, vault_token]
    commands:
      - novops load -e build > .secrets

  db-create:
    image: mariadb:10.3
    commands:
      - . .secrets
      - mysql -hdb -uroot -proot -e "CREATE DATABASE app"
      - eval "$MYSQLDUMP" | mysql -hdb -uroot -proot app

  app-config:
    image: deblan/php:8.1
    commands:
      - echo APP_ENV=prod >> .env.local
      - echo APP_SECRET=$(openssl rand -hex 32) >> .env.local
      - echo DATABASE_URL=mysql://root:root@db/app >> .env.local

  php-composer:
    image: deblan/php:8.1
    commands:
      - apt-get update && apt-get -y install git
      - composer install --no-scripts

  db-migrate:
    image: deblan/php:8.1
    environment:
      - PHP=php
    commands:
      - ./bin/doctrine-migrate

  app-jsroutes:
    image: deblan/php:8.1
    commands:
      - php bin/console fos:js-routing:dump --format=json --target=public/js/fos_js_routes.json

  node-build:
    image: node:16-alpine
    environment:
      - CPU_COUNT=3
    volumes: *volumes
    commands:
      - apk add --no-cache git
      - npm install -g svg2ttf ttf2eot ttf2woff2
      - svg2ttf assets/fonts/deblan/src/deblan-icon.svg assets/fonts/deblan/deblan-icon.ttf
      - cat assets/fonts/deblan/deblan-icon.ttf | ttf2woff2 > assets/fonts/deblan/deblan-icon.woff2
      - ttf2eot assets/fonts/deblan/deblan-icon.ttf assets/fonts/deblan/deblan-icon.eot
      - yarn
      - test -f public/js/fos_js_routes.json || echo "{}" > public/js/fos_js_routes.json
      - npm run build

  security-check:
    image: gitnet.fr/deblan/osv-detector:v0.9
    commands:
      - osv-detector composer.lock yarn.lock
    failure: ignore

  cache-build:
    image: deblan/mage
    volumes: *volumes
    commands:
      - cd /builds
      - rsync -az "$CI_WORKSPACE/" "$CI_COMMIT_SHA"

services:
  db:
    image: mariadb:10.3
    environment:
      - MARIADB_ROOT_PASSWORD=root

volumes:
  node_cache: