Minimal production test on github

This commit splits up the existing ci.yml into multiple files, and adds
a new test that tries to bring up the production webserver from scratch
to make sure that it works.

Author: dutow

.github/workflows/docker-build.yml

@@ -0,0 +1,22 @@
+name: Docker Build
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  docker-build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Build app image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: Dockerfile
+          push: false
+          tags: hackorum:test

.github/workflows/prod-boot.yml

@@ -0,0 +1,52 @@
+name: Prod Boot
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  prod-boot:
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Prepare deploy env file
+        run: |
+          cp deploy/.env.example deploy/.env
+          # Override secrets/SSL for CI boot
+          ruby -e "require 'securerandom'; puts \"SECRET_KEY_BASE=#{SecureRandom.hex(64)}\"" >> deploy/.env
+          echo "FORCE_SSL=false" >> deploy/.env
+          echo "APP_HOST=localhost" >> deploy/.env
+          # Copy Postgres config template and shrink memory settings
+          cp deploy/postgres/postgresql.conf.example deploy/postgres/postgresql.conf
+          sed -i 's/^shared_buffers = .*/shared_buffers = 128MB/' deploy/postgres/postgresql.conf
+          sed -i 's/^effective_cache_size = .*/effective_cache_size = 256MB/' deploy/postgres/postgresql.conf
+          sed -i 's/^work_mem = .*/work_mem = 4MB/' deploy/postgres/postgresql.conf
+          sed -i 's/^maintenance_work_mem = .*/maintenance_work_mem = 64MB/' deploy/postgres/postgresql.conf
+
+      - name: Start database
+        run: docker compose -f deploy/docker-compose.yml up -d db
+
+      - name: Prepare database (migrations)
+        run: docker compose -f deploy/docker-compose.yml run --rm web bin/rails db:prepare
+
+      - name: Start web
+        run: docker compose -f deploy/docker-compose.yml up -d web
+
+      - name: Verify web healthcheck
+        run: |
+          for i in {1..30}; do
+            if docker compose -f deploy/docker-compose.yml exec web sh -lc "curl -fs http://localhost:3000/up"; then
+              exit 0
+            fi
+            sleep 5
+          done
+          docker compose -f deploy/docker-compose.yml logs --tail=200 web db
+          exit 1
+
+      - name: Teardown
+        if: always()
+        run: docker compose -f deploy/docker-compose.yml down -v

.github/workflows/ci.yml .github/workflows/test.yml.github/workflows/ci.yml renamed to .github/workflows/test.yml

@@ -1,4 +1,4 @@
-name: CI
+name: Tests
 
 on:
   push:
@@ -46,17 +46,3 @@ jobs:
 
       - name: Run specs
         run: bundle exec rspec
-
-  docker-build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-      - name: Build app image
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          file: Dockerfile
-          push: false
-          tags: hackorum:test

config/database.yml

@@ -65,7 +65,7 @@ test:
 production:
   primary: &primary_production
     <<: *default
-    database: hackorum_production
+    database: hackorum
     username: hackorum
     password: <%= ENV["HACKORUM_DATABASE_PASSWORD"] %>
   cache:

deploy/.env.example

@@ -6,10 +6,12 @@ RAILS_SERVE_STATIC_FILES=1
 SECRET_KEY_BASE=change-me
 
 # Database (used by DATABASE_URL below)
-POSTGRES_USER=postgres
-POSTGRES_PASSWORD=postgres
+POSTGRES_USER=hackorum
+POSTGRES_PASSWORD=hackorum
 POSTGRES_DB=hackorum
-DATABASE_URL=postgresql://postgres:postgres@db:5432/hackorum
+# Keep it in sync with the above parameters!
+DATABASE_URL=postgresql://hackorum:hackorum@db:5432/hackorum
+HACKORUM_DATABASE_PASSWORD=hackorum
 
 # IMAP ingestion
 IMAP_USERNAME=you@example.com