front end v1

.env

@@ -0,0 +1,10 @@
+## Shared Environment Variables for the project
+GOOGLE_APPLICATION_CREDENTIALS=./secrets/gcp_credentials.json
+GCLOUD_PROJECT=cs3219-ay2425s1-project-g10
+GCLOUD_REGION=us-central1
+GCLOUD_ZONE=us-central1-c
+GCLOUD_REPOSITORY_ID=cs3219-ay2425s1-project-g10
+
+# Terraform backend variables
+TF_BACKEND_BUCKET_NAME=${GCLOUD_PROJECT}-tfstate
+

.github/actions/container_setup/action.yml

@@ -0,0 +1,17 @@
+name: Setup Action
+description: Set up environment, authenticate, and configure git for workflows under the kimyongbeom/peerprep-actions-runner container.
+
+runs:
+  using: composite
+  steps:
+    - name: Configure Git
+      shell: bash
+      run: |
+        git config --global --add safe.directory "$PWD"
+
+    - name: Decrypt Secret Files
+      shell: bash
+      run: |
+        mkdir -p ${XDG_CONFIG_HOME:-$HOME/.config}/sops/age
+        echo $AGE_SECRET_KEY > ${XDG_CONFIG_HOME:-$HOME/.config}/sops/age/keys.txt
+        /bin/bash ./scripts/secret.sh decrypt

.github/workflows/cleanup_branch.yml

@@ -0,0 +1,53 @@
+# This is a basic workflow to help you get started with Actions
+
+name: Branch Cleanup
+
+# Controls when the workflow will run
+on:
+  # On push @ branch
+  pull_request:
+    types: [closed]
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+jobs:
+  cleanup_infra:
+    # Run only if PR is merged
+    if: github.event.pull_request.merged == true
+    # The type of runner that the job will run on
+    runs-on: ubuntu-latest
+
+    container:
+      image: kimyongbeom/peerprep-actions-runner:latest
+      env:
+        AGE_SECRET_KEY: ${{ secrets.AGE_SECRET_KEY }}
+      volumes:
+        - /var/run/docker.sock:/var/run/docker.sock
+      options: --privileged
+
+    concurrency:
+      # current branch
+      group: ${{ github.event.pull_request.head.ref }}
+
+    permissions: write-all
+
+    # Steps represent a sequence of tasks that will be executed as part of the job
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+      - uses: ./.github/actions/container_setup
+
+      - name: Destroy Global Infrastructure
+        shell: bash
+        run: cd docker_registry && make destroy
+
+      - name: Destroy Backend
+        shell: bash
+        run: cd backend && make destroy
+
+      - name: Destroy Frontend
+        shell: bash
+        run: . $NVM_DIR/nvm.sh && cd frontend && make destroy

.github/workflows/on_pr.yml

@@ -0,0 +1,37 @@
+# This is a basic workflow to help you get started with Actions
+
+name: Checks on PRs
+
+# Controls when the workflow will run
+on:
+  # Triggers the workflow on push or pull request events but only for the "main" branch
+  pull_request:
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+jobs:
+  # This workflow contains a single job called "build"
+  test:
+    # The type of runner that the job will run on
+    runs-on: ubuntu-latest
+    container:
+      image: kimyongbeom/peerprep-actions-runner:latest
+      env:
+        AGE_SECRET_KEY: ${{ secrets.AGE_SECRET_KEY }}
+      volumes:
+        - /var/run/docker.sock:/var/run/docker.sock
+      options: --privileged
+    concurrency:
+      # current branch
+      group: ${{ github.head_ref }}
+
+    # Steps represent a sequence of tasks that will be executed as part of the job
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/container_setup
+
+      # Runs a single command using the runners shell
+      - name: Run a one-line script
+        run: echo Hello, world!

.github/workflows/on_push.yml

@@ -0,0 +1,64 @@
+# This is a basic workflow to help you get started with Actions
+
+name: Actions on Push
+
+# Controls when the workflow will run
+on:
+  # On push @ branch
+  push:
+  # When branch is created
+  create:
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+jobs:
+  # This workflow contains a single job called "build"
+  deploy:
+    # The type of runner that the job will run on
+    runs-on: ubuntu-latest
+    container:
+      image: kimyongbeom/peerprep-actions-runner:latest
+      env:
+        AGE_SECRET_KEY: ${{ secrets.AGE_SECRET_KEY }}
+      volumes:
+        - /var/run/docker.sock:/var/run/docker.sock
+      options: --privileged
+    concurrency:
+      # current branch
+      group: ${{ github.ref_name }}
+
+
+    # Steps represent a sequence of tasks that will be executed as part of the job
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/container_setup
+
+      - name: Find Changed Files
+        uses: dorny/paths-filter@v3
+        id: changes
+        with:
+          filters: |
+            global_infra:
+              - 'tf/**'
+            frontend:
+              - 'frontend/**'
+            backend:
+              - 'backend/**'
+
+      - name: Deploy Global Infrastructure
+        shell: bash
+        if: ${{ github.event_name }} == 'create' || ${{ steps.changes.outputs.global_infra }} == 'true'
+        run: cd docker_registry && make deploy
+
+      - name: Deploy Backend
+        if: ${{ github.event_name }} == 'create' || ${{ steps.changes.outputs.backend }} == 'true'
+        shell: bash
+        run: cd backend && make deploy
+
+      - name: Deploy Frontend
+        if: ${{ github.event_name }} == 'create' || ${{ steps.changes.outputs.frontend }} == 'true'
+        shell: bash
+        run: . $NVM_DIR/nvm.sh && cd frontend && make deploy
+

.github/workflows/pr_setup.yml

@@ -0,0 +1,53 @@
+# This is a basic workflow to help you get started with Actions
+
+name: Setup Actions on new Pull Request
+
+# Controls when the workflow will run
+on:
+  # Triggers the workflow on push or pull request events but only for the "main" branch
+  pull_request:
+      types: [opened, synchronize]
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+jobs:
+  # This workflow contains a single job called "build"
+  test:
+    # The type of runner that the job will run on
+    runs-on: ubuntu-latest
+    container:
+      image: kimyongbeom/peerprep-actions-runner:latest
+      env:
+        AGE_SECRET_KEY: ${{ secrets.AGE_SECRET_KEY }}
+      volumes:
+        - /var/run/docker.sock:/var/run/docker.sock
+      options: --privileged
+    concurrency:
+      # current branch
+      group: ${{ github.head_ref }}
+
+    permissions:
+      contents: read
+      pull-requests: write
+
+    # Steps represent a sequence of tasks that will be executed as part of the job
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ./.github/actions/container_setup
+      - name: Get all deployment URLs
+        id: urls
+        run: |
+          echo frontend=$(cd frontend && make url) >> $GITHUB_OUTPUT
+          echo backend=$(cd backend && make url) >> $GITHUB_OUTPUT
+
+
+      - name: Add a comment to the pull request
+        uses: peter-evans/create-or-update-comment@v3
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          issue-number: ${{ github.event.pull_request.number }}
+          body: |
+            Frontend URL: ${{ steps.urls.outputs.frontend }}
+            Backend URL: ${{ steps.urls.outputs.backend }}

.gitignore

@@ -0,0 +1,44 @@
+/google-cloud-sdk/
+/secrets/*
+# Encrypted secrets
+!*.enc
+
+# https://github.com/github/gitignore/blob/main/Terraform.gitignore
+# Local .terraform directories
+**/.terraform/*
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+
+# Crash log files
+crash.log
+crash.*.log
+
+# Exclude all .tfvars files, which are likely to contain sensitive data, such as
+# password, private keys, and other secrets. These should not be part of version 
+# control as they are data points which are potentially sensitive and subject 
+# to change depending on the environment.
+*.tfvars
+*.tfvars.json
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Ignore transient lock info files created by terraform apply
+.terraform.tfstate.lock.info
+
+# Include override files you do wish to add to version control using negated pattern
+# !example_override.tf
+
+# Include tfplan files to ignore the plan output of command: terraform plan -out=tfplan
+# example: *tfplan*
+
+# Ignore CLI configuration files
+.terraformrc
+terraform.rc
+node_modules

.sops.yaml

@@ -0,0 +1,11 @@
+## KEYS:
+# Yongbeom: age1c0fqjnprp4pzk8kx5y23mlkreu5z34v3tkrrwrcmf56cmu3zaf0q30sqfv
+# Bhanuka: age1kdym6a2z8trwn3efwj4kw2eypsh2pucl4vk3faqmqglhgx4ek47s3mt3kk
+# GH Actions Runner: age1g2yz8vzyyzmdsht3398da6nu3pgl54rkw5wuveqh5wfn23r2hy0qu6d4dw
+
+creation_rules:
+    # Note: must be comma separated
+    - age: >-
+        age1c0fqjnprp4pzk8kx5y23mlkreu5z34v3tkrrwrcmf56cmu3zaf0q30sqfv,
+        age1g2yz8vzyyzmdsht3398da6nu3pgl54rkw5wuveqh5wfn23r2hy0qu6d4dw,
+        age1kdym6a2z8trwn3efwj4kw2eypsh2pucl4vk3faqmqglhgx4ek47s3mt3kk

Makefile

@@ -0,0 +1,50 @@
+SHELL := /bin/bash
+MAKEFLAGS += --no-print-directory
+
+.PHONY: help deploy_tf_backend destroy_tf_backend
+
+
+
+help: ## Display this help text
+	@awk 'BEGIN {FS = ":.*##"; printf "\nUsage:\n  make \033[36m\033[0m\n"} /^[$$()% 0-9a-zA-Z_-]+:.*?##/ { printf "  \033[36m%-15s\033[0m %s\n", $$1, $$2 } /^##@/ { printf "\n\033[1m%s\033[0m\n", substr($$0, 5) } ' $(MAKEFILE_LIST)
+
+
+urls: ## Get the URL endpoints of all deployed resources.
+	@echo "FRONTEND_URL: $$(cd frontend && $(MAKE) url)"
+	@echo "BACKEND_URL: $$(cd backend && $(MAKE) url)"
+
+encrypt: ## Encrypt the secrets file
+	./scripts/secret.sh encrypt
+
+decrypt: ## Decrypt the secrets file
+	./scripts/secret.sh decrypt
+
+
+## Repo-wide
+deploy: ## Deploy all infrastructure and code
+	$(MAKE) -C docker_registry deploy
+	$(MAKE) -C backend deploy
+	$(MAKE) -C frontend deploy
+
+# Recommended to destroy services in the reverse order of deployment.
+destroy: ## Destroy all infrastructure and code
+	$(MAKE) -C frontend destroy 
+	$(MAKE) -C backend destroy
+	$(MAKE) -C docker_registry destroy
+
+##
+## Terraform backend
+##
+
+deploy_tf_backend: ## Deploy the OpenTofu/Terraform backend to GCP
+	. ./source.sh && \
+		unset TF_WORKSPACE && \
+		cd tf_backend && \
+		tofu init && \
+		tofu apply -auto-approve
+
+destroy_tf_backend: ## Destroy the OpenTofu/Terraform backend on GCP
+	. ./source.sh && \
+		unset TF_WORKSPACE && \
+		cd tf_backend && \
+		tofu destroy -auto-approve