slimcore-website/.forgejo/workflows/deploy.yml

name: Deploy Marketing-Site

on:
  push:
    branches:
      - main
  workflow_dispatch:

concurrency:
  group: deploy-marketing
  cancel-in-progress: false

jobs:
  build-and-deploy:
    name: Build, Test und Deploy
    runs-on: docker
    container:
      image: node:22-bookworm
    steps:
      - name: Checkout (inkl. Submodule brand-system)
        uses: actions/checkout@v4
        with:
          submodules: recursive
          fetch-depth: 1

      - name: pnpm aktivieren
        run: |
          corepack enable
          corepack prepare pnpm@latest --activate

      - name: Dependencies
        run: pnpm install --frozen-lockfile

      - name: Production-Build
        run: pnpm build

      - name: Playwright-Browser
        run: pnpm exec playwright install --with-deps chromium

      - name: Smoke-Tests gegen Production-Build
        run: pnpm exec playwright test
        env:
          CI: '1'

      - name: rsync + ssh installieren
        run: apt-get update && apt-get install -y --no-install-recommends rsync openssh-client

      - name: SSH-Key setzen
        env:
          SSH_KEY: ${{ secrets.MARKETING_SSH_KEY }}
          HOST: ${{ secrets.MARKETING_HOST }}
        run: |
          mkdir -p ~/.ssh
          chmod 700 ~/.ssh
          echo "$SSH_KEY" > ~/.ssh/marketing
          chmod 600 ~/.ssh/marketing
          ssh-keyscan -H "$HOST" >> ~/.ssh/known_hosts 2>/dev/null

      - name: Rsync zu Marketing-VPS
        run: |
          rsync -avz --delete \
            -e "ssh -i ~/.ssh/marketing -o StrictHostKeyChecking=yes" \
            dist/ \
            "${{ secrets.MARKETING_USER }}@${{ secrets.MARKETING_HOST }}:slimcore.io/"

      - name: Deploy-Verifikation
        run: |
          sleep 3
          STATUS=$(curl -sI https://slimcore.io/ | awk '/HTTP\//{print $2; exit}')
          # 200 = oeffentlich; 401 = Pre-Launch mit Basic-Auth (siehe Caddyfile).
          # Beide bestaetigen, dass Caddy den frischen Build serviert.
          case "$STATUS" in
            200|401) echo "✓ slimcore.io antwortet mit $STATUS" ;;
            *)       echo "slimcore.io liefert HTTP $STATUS, erwartet 200 oder 401"; exit 1 ;;
          esac