build_docker.yml

name: "Build Docker Image"

on:
  push:
    branches:
      - "master"
      - "dev"

  workflow_dispatch:
    inputs:
      canarytokens-docker-branch:
        description: "Branch of the canarytokens-docker repo to pull for build. Defaults to master"
        required: false
        default: "master"

jobs:
  build:
    runs-on: ubuntu-20.04
    env:
      COPYFILE_DISABLE: 1

    steps:
      - name: set Canarytokens Docker repo branch
        run: |
          if [ -z "${{ github.event.inputs.canarytokens-docker-branch }}" ]; then
            BRANCH="master"
          else
            BRANCH="${{ github.event.inputs.canarytokens-docker-branch }}"
          fi
          echo "CANARYTOKENS_DOCKER_BRANCH=$BRANCH" >> "$GITHUB_ENV"


      - uses: actions/checkout@v4
        with:
          repository: thinkst/canarytokens-docker
          path: canarytokens-docker
          ref: ${{ env.CANARYTOKENS_DOCKER_BRANCH }}

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v1

      - name: Login to DockerHub
        uses: docker/login-action@v1
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Fixup the build branch
        run: |
          sed -i'' "s/master/${GITHUB_REF##*/}/g" /home/runner/work/canarytokens/canarytokens/canarytokens-docker/canarytokens/Dockerfile
          sed -i'' "s/_COMMIT_HASH_/${GITHUB_SHA##*/}/g" /home/runner/work/canarytokens/canarytokens/canarytokens-docker/canarytokens/Dockerfile
          echo "Building for ${GITHUB_REF##*/}"
          cat /home/runner/work/canarytokens/canarytokens/canarytokens-docker/canarytokens/Dockerfile

      - name: Docker meta
        id: meta
        uses: docker/metadata-action@v3
        with:
          images: |
            thinkst/canarytokens
          tags: |
            type=raw,value=latest,enable=${{ endsWith(github.ref, github.event.repository.default_branch) }}
            type=schedule
            type=ref,event=branch
            type=ref,event=pr
            type=semver,pattern={{version}}
            type=semver,pattern={{major}}.{{minor}}
            type=semver,pattern={{major}}
            type=sha

      - name: Build and push
        id: docker_build
        uses: docker/build-push-action@v4
        with:
          context: /home/runner/work/canarytokens/canarytokens/canarytokens-docker/canarytokens
          push: true
          platforms: linux/amd64,linux/arm64
          tags: ${{ steps.meta.outputs.tags }}
          cache-from: type=gha
          cache-to: type=gha,mode=max
          build-args: |
            CACHE_BUSTER_COMMIT=${{ github.sha }}

    outputs:
      canarytokens-docker-branch: ${{ env.CANARYTOKENS_DOCKER_BRANCH }}

  dev-deploy:
    if: github.repository == 'thinkst/canarytokens' && github.ref == 'refs/heads/dev'
    runs-on: [self-hosted, dev]
    needs: build
    steps:
      - name: Deploy to dev machine
        run: |
          cd /home/ubuntu/canarytokens-scripts/
          ./canarytokensdb_s3backup.sh
          cd /home/ubuntu/canarytokens-docker
          git stash && git checkout ${{ needs.build.outputs.canarytokens-docker-branch }} && git pull
          sed "s/thinkst\/canarytokens$/thinkst\/canarytokens:${GITHUB_REF##*/}/g" common-services.yml > common-services-${GITHUB_REF##*/}.yml
          sed "s/file: common-services.yml/file: common-services-${GITHUB_REF##*/}.yml/g" docker-compose-letsencrypt.yml > docker-compose-letsencrypt-${GITHUB_REF##*/}.yml
          sed -i'' "s/CANARY_DEV_BUILD_ID=.*/CANARY_DEV_BUILD_ID=${GITHUB_SHA:0:8}/" frontend.env
          sudo docker pull thinkst/canarytokens:${GITHUB_REF##*/}
          sudo docker compose -f docker-compose-letsencrypt-${GITHUB_REF##*/}.yml pull
          sudo docker compose -f docker-compose-letsencrypt-${GITHUB_REF##*/}.yml up -d
          sudo docker system prune -f -a

  staging-deploy:
    if: github.repository == 'thinkst/canarytokens' && github.ref == 'refs/heads/master'
    runs-on: [self-hosted, staging]
    needs: build
    steps:
      - name: Deploy to staging machine
        run: |
          cd /home/ubuntu/canarytokens-scripts/
          ./canarytokensdb_s3backup.sh
          cd /home/ubuntu/canarytokens-docker
          git stash && git checkout ${{ needs.build.outputs.canarytokens-docker-branch }}  && git pull
          sed "s/thinkst\/canarytokens$/thinkst\/canarytokens:${GITHUB_REF##*/}/g" common-services.yml > common-services-${GITHUB_REF##*/}.yml
          sed "s/file: common-services.yml/file: common-services-${GITHUB_REF##*/}.yml/g" docker-compose-aws-logging-letsencrypt.yml > docker-compose-aws-logging-letsencrypt-${GITHUB_REF##*/}.yml
          sed -i'' "s/CANARY_DEV_BUILD_ID=.*/CANARY_DEV_BUILD_ID=${GITHUB_SHA:0:8}/" frontend.env
          sudo docker pull thinkst/canarytokens:${GITHUB_REF##*/}
          sudo docker compose -f docker-compose-aws-logging-letsencrypt-${GITHUB_REF##*/}.yml pull
          sudo docker compose -f docker-compose-aws-logging-letsencrypt-${GITHUB_REF##*/}.yml up -d
          sudo docker system prune -f -a