Add deployment pipeline

Author: gavlyukovskiy

.github/workflows/deploy-to-digital-ocean.yml

@@ -0,0 +1,32 @@
+name: deploy-to-digital-ocean.yml
+on:
+  workflow_call:
+    inputs:
+      version:
+        required: true
+        type: string
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Docker image tag to deploy'
+        required: true
+        default: 'latest'
+
+jobs:
+  deploy:
+    # do not execute on forks
+    if: ${{ github.repository == 'HackYourFuture/CourseHub' }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    environment: coursehub.hyf.dev
+    concurrency: coursehub.hyf.dev
+    steps:
+    - name: Deploy coursehub
+      uses: digitalocean/app_action/deploy@v2
+      env:
+        IMAGE_TAG_COURSE_HUB: ${{ inputs.version }}
+      with:
+        app_name: coursehub
+        token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }}

.github/workflows/on-release-tag.yaml .github/workflows/on-release-tag.yml.github/workflows/on-release-tag.yaml renamed to .github/workflows/on-release-tag.yml

@@ -8,18 +8,20 @@ on:
       version:
         description: 'Version to release (must start with "v")'
         required: true
+      deploy:
+        description: 'Deploy to DigitalOcean'
+        required: false
+        default: false
+        type: boolean
 
 jobs:
   build-image:
     runs-on: ubuntu-latest
     permissions:
       contents: read
       packages: write
-      attestations: write
-      id-token: write
     outputs:
-      digest: ${{ steps.push.outputs.digest }}
-      tags: ${{ steps.meta.outputs.tags }}
+      version: ${{ steps.get-version.outputs.version }}
     steps:
       - uses: actions/checkout@v5
 
@@ -40,14 +42,27 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Build
-        env:
-          DOCKER_PUSH: true
+      - id: get-version
         run: |
           # Determine version from tag or input
-          VERSION="${{ github.event.inputs.version || '' }}"
+          VERSION="${{ inputs.version || '' }}"
           if [ -z "$VERSION" ]; then
             VERSION="${GITHUB_REF_NAME#v}"
           fi
+          echo "version=${VERSION}" >> $GITHUB_OUTPUT
 
-          ./gradlew -Pversion=$VERSION bootBuildImage
+      - name: Build
+        env:
+          DOCKER_PUSH: true
+        run: ./gradlew -Pversion=${{ steps.get-version.outputs.version }} bootBuildImage
+
+  deploy:
+    # do not execute on forks
+    if: ${{ github.repository == 'HackYourFuture/CourseHub' && inputs.deploy }}
+    needs: build-image
+    permissions:
+      contents: read
+    uses: ./.github/workflows/deploy-to-digital-ocean.yml
+    secrets: inherit
+    with:
+      version: ${{ needs.build-image.outputs.version }}