Add Gitea CI/CD and Portainer stack templates

.gitea/workflows/ci-cd.yml

@@ -0,0 +1,103 @@
+name: production-orders-sync CI/CD
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+env:
+  DEFAULT_REGISTRY_URL: gitea.blyzer.com.br
+  DEFAULT_IMAGE_REPOSITORY: blyzer/production-order-tiny
+
+jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+          cache: npm
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Run tests
+        run: npm test
+
+      - name: Run syntax checks
+        run: npm run check
+
+  build-and-push:
+    name: Build and Push Image
+    runs-on: ubuntu-latest
+    needs:
+      - test
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Resolve image names
+        env:
+          REGISTRY_URL: ${{ secrets.REGISTRY_URL }}
+          IMAGE_REPOSITORY: ${{ secrets.IMAGE_REPOSITORY }}
+        run: |
+          set -eu
+          REGISTRY_URL="${REGISTRY_URL:-$DEFAULT_REGISTRY_URL}"
+          IMAGE_REPOSITORY="${IMAGE_REPOSITORY:-$DEFAULT_IMAGE_REPOSITORY}"
+          SHORT_SHA="$(printf '%s' "$GITHUB_SHA" | cut -c1-12)"
+          IMAGE_REF="${REGISTRY_URL}/${IMAGE_REPOSITORY}"
+
+          echo "REGISTRY_URL=${REGISTRY_URL}" >> "$GITHUB_ENV"
+          echo "IMAGE_REF=${IMAGE_REF}" >> "$GITHUB_ENV"
+          echo "IMAGE_TAG=${SHORT_SHA}" >> "$GITHUB_ENV"
+          echo "Building ${IMAGE_REF}:${SHORT_SHA} and ${IMAGE_REF}:latest"
+
+      - name: Login to registry
+        env:
+          REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
+          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
+        run: |
+          set -eu
+          if [ -z "${REGISTRY_USERNAME:-}" ] || [ -z "${REGISTRY_PASSWORD:-}" ]; then
+            echo "REGISTRY_USERNAME and REGISTRY_PASSWORD secrets are required."
+            exit 1
+          fi
+          printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY_URL" --username "$REGISTRY_USERNAME" --password-stdin
+
+      - name: Build Docker image
+        run: |
+          set -eu
+          docker build --pull \
+            --tag "${IMAGE_REF}:${IMAGE_TAG}" \
+            --tag "${IMAGE_REF}:latest" \
+            .
+
+      - name: Push Docker image
+        run: |
+          set -eu
+          docker push "${IMAGE_REF}:${IMAGE_TAG}"
+          docker push "${IMAGE_REF}:latest"
+
+  deploy-portainer:
+    name: Trigger Portainer
+    runs-on: ubuntu-latest
+    needs:
+      - build-and-push
+    steps:
+      - name: Trigger Portainer stack webhook
+        env:
+          PORTAINER_WEBHOOK_URL: ${{ secrets.PORTAINER_WEBHOOK_URL }}
+        run: |
+          set -eu
+          if [ -z "${PORTAINER_WEBHOOK_URL:-}" ]; then
+            echo "PORTAINER_WEBHOOK_URL secret is not set; skipping Portainer trigger."
+            exit 0
+          fi
+          curl --fail --silent --show-error --request POST "$PORTAINER_WEBHOOK_URL"
+          echo "Portainer webhook triggered."