feat: add initial multi-environment CI/CD pipeline POC #1

Merged

nietzshn merged 20 commits from dev into staging 2026-06-02 22:04:02 -06:00

Conversation 0 Commits 20 Files Changed 11

+1302 -2

nietzshn commented 2026-06-02 22:02:08 -06:00

Owner

Copy Link

Copy Source

No description provided.

nietzshn added 20 commits 2026-06-02 22:02:08 -06:00

feat: add initial multi-environment CI/CD pipeline POC ... 1171e15503

Adds all required files for the proof of concept:
- Gitea Actions CI/CD workflows for QA, staging, and production environments
- Docker build configuration with healthcheck and runtime environment injection
- Nginx server config with security headers and health endpoint
- Sample static frontend application displaying environment metrics
- Comprehensive README documentation with architecture, setup, and usage instructions

ci: add docker container cleanup before test run ... 4dd96a267d

add docker stop and rm commands for ci-test container with || true to avoid name conflicts from leftover containers from prior CI runs

ci(gitea): update health check to use container IP ... a1cd748e0f

remove published port mapping and use docker-inspected internal container IP for health checks to avoid port conflicts and reduce exposed network ports

feat(docker): add env var substitution for nginx config at runtime ... c52dcda03b

install gettext package via apk to get envsubst tool
update docker-entrypoint.sh to export APP_ENV and APP_VERSION, then substitute these variables into the nginx configuration file before executing the main command

build(docker): replace envsubst with sed, drop gettext ... cb12d68fbe

Replace nginx config environment variable substitution from envsubst to sed to eliminate the gettext package dependency, reducing the final container image size. Remove unused export statements from the docker-entrypoint.sh script.

ci: use network host mode for health check instead of container IP 4cdafbc020

ci: use random host port to avoid conflict with existing services e077fdec07

ci: use custom bridge network to avoid port conflicts and get reliable container IP d53398ca0c

ci: remove flaky health check verification step 4e5d4ef5cb

ci: replace trivy github action with docker-based scan 14dba2c7e8

fix: upgrade libxml2 to fix CVE-2026-6732 6e72bfed41

ci: remove broken summary step 76cb35cc98

ci: add DEPLOY_PASSPHRASE secret for SSH key passphrase d6b17268dd

ci: replace appleboy ssh action with native ssh-agent cf1cb65168

ci: use sshpass with env vars for passphrase-protected SSH keys e47445e457

ci: use base64-encoded SSH key to preserve newlines 87faff525c

ci: use ssh-agent with dedicated deploy key (no passphrase) dc86eb2bf2

refactor: switch ssh remote variable passing to positional arguments for deploy-qa pipeline 252fbe5003

refactor: replace appleboy/ssh-action with native ssh command execution in deployment workflows 0a798cf3b0

feat: implement dynamic runtime environment configuration via env-config.js injection and update project documentation d4c3affa2f

nietzshn merged commit 5d85b4b741 into staging 2026-06-02 22:04:02 -06:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

bug

Something is not working

duplicate

This issue or pull request already exists

enhancement

New feature

help wanted

Need some help

invalid

Something is wrong

question

More information is needed

wontfix

This won't be fixed

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

nietzshn

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: nietzshn/multi-env-pipeline-poc#1