deploy-site.yml

name: 🚀 Deploy Site
on:
  workflow_call:
    inputs:
      should_deploy:
        required: false
        type: boolean
        default: false
      run_pre_deploy_health_check:
        required: false
        type: boolean
        default: false
  workflow_dispatch:
    inputs:
      should_deploy:
        description: Whether to run the Fly deploy job.
        required: false
        type: boolean
        default: true
      run_pre_deploy_health_check:
        description: Whether to run the production pre-deploy health check.
        required: false
        type: boolean
        default: false

env:
  # Set `SITE_CACHE_VERSION` as a repository variable so all workflows share one
  # knob for invalidation.
  SITE_CACHE_VERSION: ${{ vars.SITE_CACHE_VERSION }}
  NODE_VERSION: 24

jobs:
  verify:
    name: ✅ Site Gate
    runs-on: ubuntu-latest
    steps:
      - name: ⬇️ Checkout repo
        uses: actions/checkout@v6

      - name: ⎔ Setup node
        uses: actions/setup-node@v6
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: npm
          cache-dependency-path: package-lock.json

      - name: 📥 Install site deps
        run: npm ci --workspace=kentcdodds.com

      - name: 🏄 Copy test env vars
        run: cp services/site/.env.example services/site/.env

      - name: 🧰 Cache Playwright browsers
        id: playwright-cache
        uses: actions/cache@v5
        with:
          path: ~/.cache/ms-playwright
          key: playwright-${{ runner.os }}-node${{ env.NODE_VERSION }}-${{ hashFiles('package-lock.json') }}
          restore-keys: |
            playwright-${{ runner.os }}-node${{ env.NODE_VERSION }}-

      - name: 🌐 Install Playwright browsers
        if: steps.playwright-cache.outputs.cache-hit != 'true'
        run: npm run test:e2e:install --workspace kentcdodds.com

      - name: 🔬 Verify site
        run: npm run ci:verify --workspace=kentcdodds.com

      - name: 🏦 Prime Site Cache
        id: site-cache
        if: ${{ inputs.run_pre_deploy_health_check }}
        uses: actions/cache@v5
        with:
          path: services/site/other/cache.db
          # `other/cache.db` is a derived artifact. Key it off the inputs that can
          # make it stale (content + cache/MDX code + deps), not `github.sha`.
          key: >-
            site-cache-mocks-${{ env.SITE_CACHE_VERSION }}-${{ runner.os
            }}-node${{ env.NODE_VERSION }}-${{ hashFiles(
              'package-lock.json',
              'services/site/app/utils/cache.server.ts',
              'services/site/app/utils/compile-mdx.server.ts',
              'services/site/app/utils/github.server.ts',
              'services/site/app/utils/markdown.server.ts',
              'services/site/app/utils/mdx.server.ts',
              'services/site/content/**',
              'services/site/mocks/**'
            ) }}
          restore-keys: |
            site-cache-mocks-${{ env.SITE_CACHE_VERSION }}-${{ runner.os }}-node${{ env.NODE_VERSION }}-

      - name: 🛠 Setup Database (migrations)
        if:
          ${{ inputs.run_pre_deploy_health_check &&
          steps.site-cache.outputs.cache-hit != 'true' }}
        run: npx prisma migrate deploy
        working-directory: services/site

      - name: 😅 Generate Site Cache
        if:
          ${{ inputs.run_pre_deploy_health_check &&
          steps.site-cache.outputs.cache-hit != 'true' }}
        run: npm run prime-cache:mocks

      - name: 🩺 Smoke test /healthcheck (production build)
        if: ${{ inputs.run_pre_deploy_health_check }}
        run: npm run predeploy:healthcheck
        env:
          MOCKS: 'true'

      - name: 📦 Upload site build artifacts
        uses: actions/upload-artifact@v6
        with:
          name: site-build-artifacts
          path: |
            services/site/build/
            services/site/server-build/
            services/site/app/utils/prisma-generated.server/
          retention-days: 7

  playwright:
    name: 🎭 Playwright
    needs: [verify]
    runs-on: ubuntu-latest
    timeout-minutes: 60
    continue-on-error: true
    steps:
      - name: ⬇️ Checkout repo
        uses: actions/checkout@v6

      - name: 🏄 Copy test env vars
        run: cp services/site/.env.example services/site/.env

      - name: ⎔ Setup node
        uses: actions/setup-node@v6
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: npm
          cache-dependency-path: package-lock.json

      - name: 📥 Install site deps
        run: npm ci --workspace=kentcdodds.com

      - name: 🧰 Cache Playwright browsers
        id: playwright-cache
        uses: actions/cache@v5
        with:
          path: ~/.cache/ms-playwright
          key: playwright-${{ runner.os }}-node${{ env.NODE_VERSION }}-${{ hashFiles('package-lock.json') }}
          restore-keys: |
            playwright-${{ runner.os }}-node${{ env.NODE_VERSION }}-

      - name: 🎬 Setup ffmpeg
        uses: FedericoCarboni/setup-ffmpeg@v3

      - name: 🌐 Install Playwright Browsers
        if: steps.playwright-cache.outputs.cache-hit != 'true'
        run: npm run test:e2e:install --workspace kentcdodds.com

      - name: 📦 Download site build artifacts
        uses: actions/download-artifact@v6
        with:
          name: site-build-artifacts
          path: services/site

      - name: 🛠 Setup Database
        run: npx prisma migrate reset --force
        working-directory: services/site

      - name: 🏦 Prime Site Cache
        id: site-cache
        uses: actions/cache@v5
        with:
          path: services/site/other/cache.db
          # `other/cache.db` is a derived artifact. Key it off the inputs that can
          # make it stale (content + cache/MDX code + deps), not `github.sha`.
          key: >-
            site-cache-mocks-${{ env.SITE_CACHE_VERSION }}-${{ runner.os
            }}-node${{ env.NODE_VERSION }}-${{ hashFiles(
              'package-lock.json',
              'services/site/app/utils/cache.server.ts',
              'services/site/app/utils/compile-mdx.server.ts',
              'services/site/app/utils/github.server.ts',
              'services/site/app/utils/markdown.server.ts',
              'services/site/app/utils/mdx.server.ts',
              'services/site/content/**',
              'services/site/mocks/**'
            ) }}
          restore-keys: |
            site-cache-mocks-${{ env.SITE_CACHE_VERSION }}-${{ runner.os }}-node${{ env.NODE_VERSION }}-

      - name: 😅 Generate Site Cache
        if: steps.site-cache.outputs.cache-hit != 'true'
        run: npm run prime-cache:mocks

      - name: 🎭 Playwright tests
        run: npx playwright test
        working-directory: services/site
        env:
          PORT: 8811

      - name: 📊 Upload report
        uses: actions/upload-artifact@v6
        if: always()
        with:
          name: playwright-report
          path: services/site/playwright-report/
          retention-days: 30

  deploy:
    name: 🚀 Deploy Site
    runs-on: ubuntu-latest
    needs: [verify]
    if:
      ${{ inputs.should_deploy && (github.ref == 'refs/heads/main' || github.ref
      == 'refs/heads/dev') }}
    environment: site-${{ github.ref_name == 'main' && 'production' || 'staging' }}
    concurrency:
      group: deploy-site-${{ github.ref_name }}
      cancel-in-progress: true
    steps:
      - name: ⬇️ Checkout repo
        uses: actions/checkout@v6
        with:
          fetch-depth: '50'

      - name: 👀 Read app name
        uses: SebRollen/toml-action@v1.2.0
        id: app_name
        with:
          file: 'fly.toml'
          field: 'app'

      - name: 🎈 Setup Fly
        uses: superfly/flyctl-actions/setup-flyctl@1.5

      - name: 🤖 update robots
        if: ${{ github.ref == 'refs/heads/dev' }}
        run:
          # replace "Allow" with "Disallow" in services/site/public/robots.txt for staging
          sed -i 's/Allow/Disallow/g' services/site/public/robots.txt

      - name: 🚀 Deploy Staging
        if: ${{ github.ref == 'refs/heads/dev' }}
        run:
          flyctl deploy --depot --remote-only --build-arg COMMIT_SHA=${{
          github.sha }} --dockerfile services/site/Dockerfile --app ${{
          steps.app_name.outputs.value }}-staging
        env:
          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}

      - name: 🚀 Deploy Production
        if: ${{ github.ref == 'refs/heads/main' }}
        run:
          flyctl deploy --depot --remote-only --build-arg COMMIT_SHA=${{
          github.sha }} --dockerfile services/site/Dockerfile --build-secret
          SENTRY_AUTH_TOKEN=${{
          secrets.SENTRY_AUTH_TOKEN }}
        env:
          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}