complete backend plan

.gitea/workflows/deploy.yaml

@@ -1,21 +1,96 @@
-name: Deploy to Proxmox Docker
-run-name: Deploying ${{ gitea.sha }}
+name: Test & Deploy API
+run-name: ${{ gitea.ref_name }} → Docker LXC
+
 on:
   push:
-    branches:
-      - main # O il nome del tuo branch principale
+    branches: [main]
+    tags: ['v*']
+  pull_request:
+    branches: [main]
 
 jobs:
-  Deploy:
-    runs-on: ubuntu-latest # Questo dipende dalle label che hai dato al tuo act_runner
+  # ── 1. Run tests in an isolated Python container ──────────────────
+  test:
+    runs-on: ubuntu-latest
+    container:
+      image: python:3.12-slim
+
     steps:
-      - name: Deploying via SSH
-        uses: appleboy/ssh-action@v1.0.0
-        with:
-          host: ${{ secrets.SSH_HOST }}
-          username: ${{ secrets.SSH_USER }}
-          key: ${{ secrets.SSH_KEY }}
-          script: |
-            cd /opt/adiuva-api
-            git pull origin main
-            docker compose up -d --build
+      - name: Checkout Code
+        uses: actions/checkout@v4
+
+      - name: Install Dependencies
+        run: pip install --no-cache-dir -r requirements.txt
+
+      - name: Run Linter
+        run: ruff check app/ tests/
+
+      - name: Run Tests
+        run: pytest tests/ -v --tb=short
+
+  # ── 2. Deploy to Docker LXC (only main branch & tags) ─────────────
+  deploy:
+    needs: test
+    runs-on: ubuntu-latest
+    if: gitea.event_name == 'push'
+
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v4
+
+      - name: Sync to deploy directory
+        run: |
+          DEPLOY_DIR="/opt/adiuva-api"
+          mkdir -p "$DEPLOY_DIR"
+
+          # Sync source, preserve .env and volumes
+          cp -rf app/ alembic/ alembic.ini Dockerfile docker-compose.yml requirements.txt "$DEPLOY_DIR/"
+
+      - name: Build & restart services
+        run: |
+          cd /opt/adiuva-api
+          docker compose up -d --build --remove-orphans
+
+      - name: Run database migrations
+        run: |
+          cd /opt/adiuva-api
+          docker compose exec -T app alembic upgrade head
+
+      - name: Verify deployment
+        run: |
+          echo "Waiting for app to be ready..."
+          sleep 5
+
+          HTTP_CODE=$(curl -s -o /dev/null -w "%{http_code}" http://localhost:8000/api/v1/health)
+          if [ "$HTTP_CODE" -eq 200 ]; then
+            echo "✅ API is healthy (HTTP ${HTTP_CODE})"
+          else
+            echo "❌ Health check failed (HTTP ${HTTP_CODE})"
+            docker compose -f /opt/adiuva-api/docker-compose.yml logs app --tail=50
+            exit 1
+          fi
+
+      - name: Create Gitea Release (tags only)
+        if: startsWith(gitea.ref, 'refs/tags/')
+        run: |
+          GITEA_URL="http://10.0.0.119:3000"
+          TAG="${GITHUB_REF_NAME}"
+          REPO="${GITHUB_REPOSITORY}"
+          TOKEN="${{ gitea.token }}"
+
+          RELEASE_ID=$(curl -sf \
+            -H "Authorization: token ${TOKEN}" \
+            "${GITEA_URL}/api/v1/repos/${REPO}/releases/tags/${TAG}" \
+            | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
+
+          if [ -z "$RELEASE_ID" ]; then
+            curl -sf \
+              -X POST \
+              -H "Authorization: token ${TOKEN}" \
+              -H "Content-Type: application/json" \
+              -d "{\"tag_name\":\"${TAG}\",\"name\":\"Adiuva API ${TAG}\",\"body\":\"Deployed to Docker LXC\"}" \
+              "${GITEA_URL}/api/v1/repos/${REPO}/releases"
+            echo "✅ Release ${TAG} created"
+          else
+            echo "ℹ️  Release ${TAG} already exists (ID: ${RELEASE_ID})"
+          fi