implement cicd

.dockerignore

@@ -2,7 +2,6 @@
 node_modules
 npm-debug.log
 yarn-error.log
-package-lock.json
 yarn.lock
 
 # Build output

.env.example

@@ -5,7 +5,9 @@ PUBLIC_URL="http://localhost:4000"
 PUBLIC_PORT=4000
 ALLOWED_ORIGINS=http://localhost:5173
 
+# Set a strong random value for `SESSION_SECRET` in your local `.env`
 SESSION_SECRET=""
 
-# Set a strong random value for `SESSION_SECRET` in your local `.env`
+# For MySQL (dev): mysql://user:password@localhost:3306/database
+# For Azure MySQL: mysql://user@server:password@server.mysql.database.azure.net:3306/database
 DATABASE_URL=""

.github/workflows/cicd.yml

@@ -36,6 +36,8 @@ jobs:
         run: npm ci
 
       - name: Prisma Generate
+        env:
+          DATABASE_URL: ${{ secrets.DATABASE_URL }}
         run: npx prisma generate
 
       - name: Run tests
@@ -48,6 +50,7 @@ jobs:
     name: Build & Push Docker Image
     runs-on: ubuntu-latest
     needs: build_test
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
 
     steps:
       - uses: actions/checkout@v3
@@ -78,10 +81,29 @@ jobs:
     name: Prisma Migrate Deploy
     runs-on: ubuntu-latest
     needs: docker_build_push
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
 
     steps:
       - uses: actions/checkout@v3
 
+      - name: Azure Login
+        uses: azure/login@v1
+        with:
+          creds: ${{ secrets.AZURE_CREDENTIALS }}
+
+      - name: Get Runner IP
+        id: ip
+        run: echo "runner_ip=$(curl -s https://api.ipify.org)" >> $GITHUB_OUTPUT
+
+      - name: Add Runner IP to MySQL Firewall
+        run: |
+          az mysql flexible-server firewall-rule create \
+            --resource-group ${{ secrets.AZURE_RESOURCE_GROUP }} \
+            --name ${{ secrets.AZURE_MYSQL_SERVER_NAME }} \
+            --rule-name "GitHub-Actions-${{ github.run_id }}" \
+            --start-ip-address ${{ steps.ip.outputs.runner_ip }} \
+            --end-ip-address ${{ steps.ip.outputs.runner_ip }}
+
       - name: Setup Node.js
         uses: actions/setup-node@v3
         with:
@@ -91,17 +113,29 @@ jobs:
         run: npm ci
 
       - name: Prisma Generate
+        env:
+          DATABASE_URL: ${{ secrets.DATABASE_URL }}
         run: npx prisma generate
 
       - name: Prisma Migrate Deploy
         env:
           DATABASE_URL: ${{ secrets.DATABASE_URL }}
         run: npx prisma migrate deploy
 
+      - name: Remove Runner IP from MySQL Firewall
+        if: always()
+        run: |
+          az mysql flexible-server firewall-rule delete \
+            --resource-group ${{ secrets.AZURE_RESOURCE_GROUP }} \
+            --name ${{ secrets.AZURE_MYSQL_SERVER_NAME }} \
+            --rule-name "GitHub-Actions-${{ github.run_id }}" \
+            --yes
+
   deploy:
     name: Deploy to Azure Container App
     runs-on: ubuntu-latest
-    needs: prisma_migrate
+    needs: [docker_build_push, prisma_migrate]
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main' && needs.docker_build_push.result == 'success'
 
     steps:
       - name: Azure Login

Dockerfile

@@ -13,7 +13,8 @@ RUN npm ci
 # Copy source files
 COPY . .
 
-# Generate Prisma client
+# Generate Prisma client (dummy MySQL connection for build)
+ENV DATABASE_URL="mysql://user:password@localhost:3306/db"
 RUN npm run db:generate
 
 # Build application