deploy-production.yaml

name: Deploy https://starkcompass.com/

concurrency:
  group: ${{ github.workflow }}

on:
  push:
    tags:
      - v**

jobs:
  build-deploy:
    name: Build and deploy to production
    runs-on: ubuntu-latest
    environment:
      name: production
      url: https://starkcompass.com/
    steps:
      - name: Checkout
        uses: actions/checkout@v3.3.0

      - name: Tailscale
        uses: tailscale/github-action@v2
        with:
          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
          oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
          tags: tag:ci

      - name: Create ssh private key file from env var
        env:
          SSH_KEY: ${{ secrets.SSH_KEY }}
          TS_HOST: ${{ vars.TS_HOST }}
        run: |
          mkdir ~/.ssh/
          sed -E 's/(-+(BEGIN|END) OPENSSH PRIVATE KEY-+) *| +/\1\n/g' <<< "$SSH_KEY" > ~/.ssh/id_ed25519
          chmod 400 ~/.ssh/id_ed25519
          retries=5; until ssh-keyscan $TS_HOST >> ~/.ssh/known_hosts || [ $retries -eq 0 ]; do ((retries--)); sleep 5; done

      - name: Install ansible
        run: |
          pip install ansible

      - name: "Deploy with ansible"
        env:
          MIX_ENV: ${{ vars.MIX_ENV }}
          DB_TYPE: ${{ vars.DB_TYPE }}
          DATABASE_URL: ${{ secrets.DATABASE_URL }}
          SECRET_KEY_BASE: ${{ secrets.SECRET_KEY_BASE }}
          PHX_HOST: ${{ vars.PHX_HOST }}
          PHX_SERVER: ${{ vars.PHX_SERVER }}
          RPC_API_HOST: ${{ secrets.RPC_API_HOST }}
          SEPOLIA_RPC_API_HOST: ${{ secrets.SEPOLIA_RPC_API_HOST }}
          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
          AWS_REGION: ${{ vars.AWS_REGION }}
          PROVER_STORAGE: ${{ vars.PROVER_STORAGE }}
          ANSIBLE_SSH_PKEY_DIR: "~/.ssh/id_ed25519"
          TS_HOST: ${{ vars.TS_HOST }}
          TS_USER: ${{ vars.TS_USER }}
          GIT_BRANCH: ${{ github.head_ref || github.ref_name }}
          ANSIBLE_STDOUT_CALLBACK: "yaml"
          NEWRELIC_KEY: ${{ secrets.NEWRELIC_KEY }}
          NEWRELIC_APP_NAME: ${{ vars.NEWRELIC_APP_NAME }}
          SENTRY_ENV: "production"
          SENTRY_DSN: ${{ secrets.SENTRY_DSN }}
          ENABLE_MAINNET_SYNC: "true"
          ENABLE_SEPOLIA_SYNC: "true"
          ENABLE_GATEWAY_DATA: "true"
        run: |
          ansible-playbook -i ansible/inventory.yaml ansible/playbooks/deployment.yaml