.drone.yml

---
kind: pipeline
type: docker
name: default

trigger:
  event:
    exclude:
      - pull_request

steps:
  - name: postgres
    image: postgres:12.3
    detach: true
    environment:
      POSTGRES_USER: lego
      POSTGRES_HOST_AUTH_METHOD: trust
    when:
      event: [push]
      branch:
        exclude: [build]

  - name: minio
    image: minio/minio:RELEASE.2023-09-23T03-47-50Z
    detach: true
    environment:
      MINIO_ACCESS_KEY: lego-dev
      MINIO_SECRET_KEY: lego-dev
    commands:
      - /usr/bin/docker-entrypoint.sh server /export
    when:
      event: [push]
      branch:
        exclude: [build]

  - name: thumbor
    image: apsl/thumbor:latest
    detach: true
    environment:
      SECURITY_KEY: 'lego-dev'
      MAX_WIDTH: '1000'
      MAX_HEIGHT: '800'
      QUALITY: '98'
      ALLOW_UNSAFE_URL: '0'
      ALLOW_OLD_URLS: '0'
      AWS_ACCESS_KEY_ID: 'lego-dev'
      AWS_SECRET_ACCESS_KEY: 'lego-dev'
      TC_AWS_LOADER_BUCKET: lego
      TC_AWS_REGION: us-east-1
      TC_AWS_ENDPOINT: '"http://minio:9000"'
      LOADER: tc_aws.loaders.s3_loader
    links:
      - minio
    when:
      event: [push]
      branch:
        exclude: [build]

  - name: redis
    image: redis
    detach: true
    when:
      event: [push]
      branch:
        exclude: [build]

  - name: api
    image: registry.webkom.dev/webkom/lego:latest
    detach: true
    pull: true
    commands:
      - ./wait-for-it.sh -t 60 postgres:5432
      - ./wait-for-it.sh -t 60 redis:6379
      - ./wait-for-it.sh -t 60 minio:9000
      - ./wait-for-it.sh -t 60 thumbor:8000
      - cd /app
      - python manage.py reset_db --noinput
      - python manage.py migrate
      - python manage.py migrate_search
      - python manage.py load_fixtures --development
      - python manage.py rebuild_index
      - python manage.py runserver 0.0.0.0:8000
    environment:
      PORT: '8000'
      ALLOWED_HOSTS: '*,'
      DATABASE_URL: 'postgres://lego@postgres:5432/lego'
      SECRET_KEY: 'abc123'
      SERVER_URL: 'http://api:8000'
      FRONTEND_URL: 'http://ssr:3000'
      CACHE_URL: 'rediscache://redis/0?client_class: django_redis.client.DefaultClient'
      OAUTH_CACHE: 'redis://redis/9'
      EMAIL_URL: 'smtp://localhost'
      AWS_ACCESS_KEY_ID: 'lego-dev'
      AWS_SECRET_ACCESS_KEY: 'lego-dev'
      AWS_REGION: 'us-east-1'
      AWS_S3_BUCKET: 'lego'
      AWS_ENTRYPOINT: 'http://minio:9000'
      THUMBOR_SERVER: 'http://thumbor:8000'
      THUMBOR_SECURITY_KEY: 'lego-dev'
      SENTRY: 'http://sentry:sentry@localhost/2'
      CELERY_BROKER_URL: 'redis://redis/1'
      CHANNELS_REDIS_URL: 'redis://redis/2'
      STRIPE_API_KEY: '123'
      STRIPE_WEBHOOK_SECRET: '123'
      CAPTCHA_KEY: '123'
      PLAUSIBLE_KEY: 'lego-dev'
      LDAP_SERVER: 'localhost'
      LDAP_USER: '123'
      LDAP_PASSWORD: '123'
      APNS_CERTIFICATE: '123'
      SEARCH_BACKEND: 'postgres'
      ELASTICSEARCH_HOST: 'ignored'
      CORS_ORIGIN_DOMAINS: 'ssr:3000'
    when:
      event: [push]
      branch:
        exclude: [build]

  - name: legocypresshelper
    image: abakus/lego-cypress-helper:latest
    detach: true
    pull: true
    when:
      event: [push]
      branch:
        exclude: [build]
    environment:
      PG_HOST: postgres
      PG_USERNAME: lego
      PG_DATABASE: lego
    commands:
      - cd /app
      - ./wait-for-it.sh -t 420 api:8000
      - node index.js
      - echo "server stopped"

  - name: setup
    image: node:18-alpine
    when:
      event: [push]
      branch:
        exclude: [build]
    depends_on:
      - postgres
      - minio
      - thumbor
      - redis
      - api
    volumes:
      - name: yarn_cache
        path: /tmp/cache
    environment:
      CYPRESS_INSTALL_BINARY: 0
    commands:
      - apk --no-cache add curl
      - yarn --frozen-lockfile --cache-folder /tmp/cache

  - name: build_packages
    image: node:18-alpine
    when:
      event: [push]
      branch:
        exclude: [build]
    depends_on:
      - setup
    commands:
      - yarn build:packages

  - name: build_server
    image: node:18-alpine
    when:
      event: [push]
      branch:
        exclude: [build]
    depends_on:
      - setup
      - build_packages
    commands:
      - yarn build:server

  - name: build_client
    image: node:18-alpine
    when:
      event: [push]
      branch:
        exclude: [build]
    depends_on:
      - setup
      - build_packages
    commands:
      - yarn build:client

  - name: test
    image: node:18-alpine
    when:
      event: [push]
      branch:
        exclude: [build]
    depends_on:
      - setup
    commands:
      - yarn test
      - yarn test:packages

  - name: lint
    image: node:18-alpine
    when:
      event: [push]
      branch:
        exclude: [build]
    depends_on:
      - setup
    commands:
      - yarn lint
      - yarn lint:packages

  - name: typescript
    image: node:18-slim
    when:
      event: [push]
      branch:
        exclude: [build]
    depends_on:
      - setup
    commands:
      - yarn types
    failure: ignore

  - name: typescript_packages
    image: node:18-slim
    when:
      event: [push]
      branch:
        exclude: [build]
    depends_on:
      - setup
    commands:
      - yarn types:packages

  - name: install_cypress
    image: node:18-alpine
    when:
      event: [push]
      branch:
        exclude: [build]
    depends_on:
      - setup
    environment:
      CYPRESS_CACHE_FOLDER: /drone/src/.cypress_cache
    commands:
      - yarn cypress install

  - name: ssr
    image: node:18-alpine
    detach: true
    when:
      event: [push]
      branch:
        exclude: [build]
    depends_on:
      - build_client
      - build_server
    environment:
      API_URL: http://api:8000/api/v1
      BASE_URL: http://api:8000
      WS_URL: ws://api:8000
      ENVIRONMENT: ci
    commands:
      - yarn ssr

  - name: cypress
    image: cypress/browsers:node-18.15.0-chrome-106.0.5249.61-1-ff-99.0.1-edge-114.0.1823.51-1
    shm_size: 512m
    ipc: host
    when:
      event: [push]
      branch:
        exclude: [build]
    depends_on:
      - legocypresshelper
      - install_cypress
      - ssr
    environment:
      TZ: Europe/Oslo
      CYPRESS_API_BASE_URL: http://api:8000
      CYPRESS_RESET_DB_API: http://legocypresshelper:3030
      CYPRESS_BASE_URL: http://ssr:3000
      CYPRESS_CACHE_FOLDER: /drone/src/.cypress_cache
      CYPRESS_RECORD_KEY:
        from_secret: cypress_record_key
    commands:
      - ./wait-for-it.sh -t 180 ssr:3000
      - ./wait-for-it.sh -t 180 legocypresshelper:3030
      - yarn cypress run --record

  - name: docker
    image: plugins/docker
    when:
      branch:
        - build
      event: push
      status: success
    depends_on:
      - build_server
      - build_client
      - test
      - lint
      - typescript
      - ssr
      - cypress
    environment:
      SENTRY_AUTH_TOKEN:
        from_secret: sentry_auth_token
    settings:
      registry: https://registry.webkom.dev
      repo: registry.webkom.dev/webkom/lego-webapp
      username:
        from_secret: docker_username
      password:
        from_secret: docker_password
      tags:
        - version-${DRONE_COMMIT_SHA:0:7}
        - latest
      build_args:
        - RELEASE=version-${DRONE_COMMIT_SHA:0:7}
        - COMMIT_SHA=${DRONE_COMMIT_SHA}
        - SENTRY_ORG=abakus
        - SENTRY_PROJECT=lego-webapp
        - SENTRY_URL=https://sentry.io/
      build_args_from_env:
        - SENTRY_AUTH_TOKEN

  - name: Deploy
    image: abakus/ansible-deploy
    settings:
      playbook: /infrastructure/lego/playbooks/deploy.yml
      repository:
        from_secret: infra_repository
      tags:
        - webapp
        - ci
      limit: ${DRONE_DEPLOY_TO}
      extra_vars: webapp_version=version-${DRONE_COMMIT_SHA:0:7}
      inventory: /infrastructure/inventory
      vault_password:
        from_secret: ansible_vault_password
      private_key:
        from_secret: infra_deploy_key
    when:
      event:
        - promote
        - rollback
      branch:
        - build

volumes:
  - name: yarn_cache
    host:
      path: /tmp/drone-cache/yarn

image_pull_secrets:
  - dockerconfigjson

---
kind: signature
hmac: 67ad38a63b7569ba2bb1386bb795cbe780df789dff66e27467af0e3c5df2df36