when: branch: main event: push steps: # Etape 1 : Validation syntaxique du docker-compose.yml validate: image: docker:27-cli volumes: - /var/run/docker.sock:/var/run/docker.sock environment: PS_DOMAIN: presta.syoul.fr DB_PASSWORD: placeholder DB_ROOT_PASSWORD: placeholder PRESTASHOP_ADMIN_EMAIL: placeholder PRESTASHOP_ADMIN_PASSWORD: placeholder commands: - docker compose config --quiet - echo "docker-compose.yml valide" # Etape 2 : Verifications de securite security-check: image: alpine:3.20 commands: - | if [ -f .env ]; then echo "ERREUR: .env ne doit pas etre commite dans le depot !" exit 1 fi - grep -q "^\.env$" .gitignore || (echo "ERREUR: .env manquant dans .gitignore" && exit 1) - echo "Verifications de securite OK" # Etape 3 : Deploiement sur sonic via Docker socket deploy: image: docker:27-cli volumes: # Acces au Docker socket de l'hote (sonic) - /var/run/docker.sock:/var/run/docker.sock # Dossier de deploiement sur l'hote (contient le .env) - /opt/prestashop:/opt/prestashop commands: # Copier le docker-compose.yml vers le dossier de deploiement - cp docker-compose.yml /opt/prestashop/docker-compose.yml # Lancer/mettre a jour la stack depuis le dossier de deploiement # (le .env doit deja etre present dans /opt/prestashop/.env sur sonic) - cd /opt/prestashop && docker compose pull - cd /opt/prestashop && docker compose up -d --remove-orphans - cd /opt/prestashop && docker compose ps # Etape 4 : Healthcheck post-deploiement healthcheck: image: curlimages/curl:8.11.0 environment: PS_DOMAIN: from_secret: PS_DOMAIN commands: - echo "Attente du demarrage de PrestaShop..." - sleep 90 - | HTTP_CODE=$(curl -sSo /dev/null -w "%{http_code}" "http://${PS_DOMAIN}" || echo "000") echo "HTTP Status: ${HTTP_CODE}" if [ "${HTTP_CODE}" != "200" ] && [ "${HTTP_CODE}" != "301" ] && [ "${HTTP_CODE}" != "302" ]; then echo "ERREUR: PrestaShop ne repond pas correctement (code ${HTTP_CODE})" exit 1 fi echo "PrestaShop repond correctement" # Notification en cas d'echec notify-failure: image: alpine:3.20 commands: - echo "ECHEC pipeline #${CI_BUILD_NUMBER} sur commit ${CI_COMMIT_SHA:0:8}" - echo "Branche: ${CI_COMMIT_BRANCH}" when: status: failure