.gitlab-ci.yml

stages:
    - build
    - deploy

deploy:
    when: manual
    stage: deploy
    before_script:
        # Install ssh-agent if not already installed, it is required by Docker.
        # (change apt-get to yum if you use a CentOS-based image)
        - 'which ssh-agent || ( apt-get update -y && apt-get install openssh-client -y )'

          # Run ssh-agent (inside the build environment)
        - eval $(ssh-agent -s)

          # Add the SSH key stored in SSH_PRIVATE_KEY variable to the agent store
        - ssh-add <(echo "$SSH_PRIVATE_KEY")

          # For Docker builds disable host key checking. Be aware that by adding that
          # you are suspectible to man-in-the-middle attacks.
          # WARNING: Use this only with the Docker executor, if you use it with shell
          # you will overwrite your user's SSH config.
        - mkdir -p ~/.ssh
        - '[[ -f /.dockerenv ]] && echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config'
    script:
        - ssh root@${SERVER_ADDRESS} "cd /build && sudo git fetch origin && git checkout ${CI_BUILD_REF}
                                      && bash ./clean.sh
                                      && docker-compose -f docker-compose.yml -f docker-compose.prod.yml pull
                                      && docker-compose -f docker-compose.yml -f docker-compose.prod.yml stop
                                      && docker-compose -f docker-compose.yml -f docker-compose.prod.yml rm -f
                                      && GITHUB_CLIENT_SECRET=${GITHUB_CLIENT_SECRET}
                                      MAILER_AUTH_USER=${MAILER_AUTH_USER}
                                      MAILER_AUTH_PASS=${MAILER_AUTH_PASS}
                                      CLOUDFLARE_API_KEY=${CLOUDFLARE_API_KEY}
                                      SECRET_KEY_BASE=${SECRET_KEY_BASE}
                                      docker-compose -f docker-compose.yml -f docker-compose.prod.yml up -d"

build:
    stage: build
    image: docker:latest
    variables:
        DOCKER_DRIVER: overlay
    services:
        - docker:dind
    before_script:
        - apk add --no-cache py2-pip
        - pip install docker-compose
    script:
        - docker login -u gitlab-ci-token -p $CI_BUILD_TOKEN registry.gitlab.com
        - docker-compose -f docker-compose.yml -f docker-compose.prod.yml build
        - docker-compose -f docker-compose.yml -f docker-compose.prod.yml push

restart:
    when: manual
    stage: deploy
    before_script:
        # Install ssh-agent if not already installed, it is required by Docker.
        # (change apt-get to yum if you use a CentOS-based image)
        - 'which ssh-agent || ( apt-get update -y && apt-get install openssh-client -y )'

          # Run ssh-agent (inside the build environment)
        - eval $(ssh-agent -s)

          # Add the SSH key stored in SSH_PRIVATE_KEY variable to the agent store
        - ssh-add <(echo "$SSH_PRIVATE_KEY")

          # For Docker builds disable host key checking. Be aware that by adding that
          # you are suspectible to man-in-the-middle attacks.
          # WARNING: Use this only with the Docker executor, if you use it with shell
          # you will overwrite your user's SSH config.
        - mkdir -p ~/.ssh
        - '[[ -f /.dockerenv ]] && echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config'
    script:
        - ssh root@${SERVER_ADDRESS} "cd /build && docker-compose -f docker-compose.yml -f docker-compose.prod.yml stop 
          && docker-compose -f docker-compose.yml -f docker-compose.prod.yml rm -f
          && GITHUB_CLIENT_SECRET=${GITHUB_CLIENT_SECRET}
          MAILER_AUTH_USER=${MAILER_AUTH_USER}
          MAILER_AUTH_PASS=${MAILER_AUTH_PASS}
          CLOUDFLARE_API_KEY=${CLOUDFLARE_API_KEY}
          SECRET_KEY_BASE=${SECRET_KEY_BASE}
          docker-compose -f docker-compose.yml -f docker-compose.prod.yml up -d"

maintain:
    when: manual
    stage: deploy
    before_script:
        # Install ssh-agent if not already installed, it is required by Docker.
        # (change apt-get to yum if you use a CentOS-based image)
        - 'which ssh-agent || ( apt-get update -y && apt-get install openssh-client -y )'

          # Run ssh-agent (inside the build environment)
        - eval $(ssh-agent -s)

          # Add the SSH key stored in SSH_PRIVATE_KEY variable to the agent store
        - ssh-add <(echo "$SSH_PRIVATE_KEY")

          # For Docker builds disable host key checking. Be aware that by adding that
          # you are suspectible to man-in-the-middle attacks.
          # WARNING: Use this only with the Docker executor, if you use it with shell
          # you will overwrite your user's SSH config.
        - mkdir -p ~/.ssh
        - '[[ -f /.dockerenv ]] && echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config'
    script:
        - ssh root@${SERVER_ADDRESS} "docker cp /build/nginx/maintenance.template build_nginx_1:/usr/share/nginx/html/maintenance.html"

rework:
    when: manual
    stage: deploy
    before_script:
        # Install ssh-agent if not already installed, it is required by Docker.
        # (change apt-get to yum if you use a CentOS-based image)
        - 'which ssh-agent || ( apt-get update -y && apt-get install openssh-client -y )'

          # Run ssh-agent (inside the build environment)
        - eval $(ssh-agent -s)

          # Add the SSH key stored in SSH_PRIVATE_KEY variable to the agent store
        - ssh-add <(echo "$SSH_PRIVATE_KEY")

          # For Docker builds disable host key checking. Be aware that by adding that
          # you are suspectible to man-in-the-middle attacks.
          # WARNING: Use this only with the Docker executor, if you use it with shell
          # you will overwrite your user's SSH config.
        - mkdir -p ~/.ssh
        - '[[ -f /.dockerenv ]] && echo -e "Host *\n\tStrictHostKeyChecking no\n\n" > ~/.ssh/config'
    script:
        - ssh root@${SERVER_ADDRESS} "docker exec -it build_nginx_1 rm -f /usr/share/nginx/html/maintenance.html"