deploy.yml

name: Docker Build & Deploy

on:
  push:
    branches:
      - main

jobs:
  Continuous-Integration:
    runs-on: self-hosted

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Build Docker Image
        run: |
          docker build -t streamlit-app \
            --build-arg OPENAI_API_KEY=${{ secrets.OPENAI_API_KEY }} \
            --build-arg WEATHER_API_KEY=${{ secrets.WEATHER_API_KEY }} \
            --build-arg SERPER_API_KEY=${{ secrets.SERPER_API_KEY }} \
            --build-arg AMADEUS_API_KEY=${{ secrets.AMADEUS_API_KEY }} \
            --build-arg AMADEUS_API_SECRET=${{ secrets.AMADEUS_API_SECRET }} .

  Continuous-Delivery:
    needs: Continuous-Integration
    runs-on: self-hosted

    steps:
      - name: Authenticate to AWS ECR
        uses: aws-actions/configure-aws-credentials@v4
        with:
          aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_DEFAULT_REGION }}

      - name: Login to Amazon ECR
        uses: aws-actions/amazon-ecr-login@v2

      - name: Push Docker Image to ECR
        run: |
          docker tag streamlit-app:latest ${{ secrets.AWS_ECR_REPO_URI }}:latest
          docker push ${{ secrets.AWS_ECR_REPO_URI }}:latest

  Continuous-Deployment:
    needs: Continuous-Delivery
    runs-on: self-hosted

    steps:
      - name: Deploy to EC2
        run: |
          ssh -i ${{ secrets.SSH_KEY }} ubuntu@44.210.129.170 \
            'docker pull ${{ secrets.AWS_ECR_REPO_URI }}:latest && \
             docker stop streamlit-app || true && \
             docker rm streamlit-app || true && \
             docker run -d --name streamlit-app -p 8501:8501 ${{ secrets.AWS_ECR_REPO_URI }}:latest'

      - name: Cleanup Old Images
        if: always()
        run: |
          docker system prune -af