[Recognizer] Setup Recognizer CD

Author: mickel8

.github/workflows/__CD__build-publish-image.yml

@@ -0,0 +1,39 @@
+on:
+  workflow_call:
+    inputs:
+      app-name:
+        required: true
+        type: string
+
+env:
+  REGISTRY: ghcr.io
+
+jobs:
+  build-publish-image:
+    name: "Build and publish Docker Image"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v2
+      - name: Login to Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          images: ${{ env.REGISTRY }}/${{ github.repository }}/${{ inputs.app-name }}
+          tags: type=match,pattern=${{ inputs.app-name }}-v(.*),group=1
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v4
+        with:
+          context: ./${{ inputs.app-name }}
+          platforms: linux/amd64
+          push: true
+          tags: ${{  steps.meta.outputs.tags }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/__CD__deploy-image.yml

@@ -0,0 +1,37 @@
+on:
+  workflow_call:
+    inputs:
+      app-name:
+        required: true
+        type: string
+    secrets:
+      ssh-host:
+        required: true
+      ssh-username:
+        required: true
+      ssh-priv-key:
+        required: true
+      secret-key-base:
+        required: true
+      phx-host:
+        required: true
+
+jobs:
+  deploy-image:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: Deploy Image
+        uses: appleboy/ssh-action@v1.0.3
+        with:
+          host: ${{ secrets.ssh-host }}
+          username: ${{ secrets.ssh-username }}
+          key: ${{ secrets.ssh-priv-key }}
+          script: |
+            export TAG=${{ github.ref_name }}
+            export TAG=${TAG#*-v}
+            echo ${TAG}
+            docker stop ${{ inputs.app-name }}
+            docker rm ${{ inputs.app-name }}
+            docker run -d --restart unless-stopped --name ${{ inputs.app-name }} -e SECRET_KEY_BASE=${{ secrets.secret-key-base }} -e PHX_HOST=${{ secrets.phx-host }} -e PORT=${{ secrets.port }} --network host ghcr.io/elixir-webrtc/apps/${{ inputs.app-name }}:${TAG}
+            docker image prune --all --force

.github/workflows/__CD__recognizer.yml

@@ -0,0 +1,29 @@
+name: Recognizer CD 
+
+on:
+  push:
+    tags:
+      - "recognizer-v*.*.*"
+
+permissions:
+  contents: read
+  packages: write
+
+jobs: 
+  build-publish-recognizer-image:
+    name: "Build and publish Recognizer Docker image"
+    uses: ./.github/workflows/__CD__build-publish-image.yml
+    with:
+      app-name: recognizer
+  deploy-recognizer:
+    name: "Deploy Recognizer Image"
+    needs: build-publish-recognizer-image
+    uses: ./.github/workflows/__CD__deploy-image.yml
+    with:
+      app-name: recognizer
+    secrets:
+      ssh-host: ${{ secrets.RECOGNIZER_SSH_HOST }}
+      ssh-username: ${{ secrets.RECOGNIZER_SSH_USERNAME }}
+      ssh-priv-key: ${{ secrets.RECOGNIZER_SSH_PRIV_KEY }}
+      secret-key-base: ${{ secrets.RECOGNIZER_SECRET_KEY_BASE }}
+      phx-host: ${{ secrets.RECOGNIZER_PHX_HOST }}

.github/workflows/ci.yml renamed to .github/workflows/__CI__all.yml

@@ -8,19 +8,19 @@ permissions:
 jobs:
   build_check_recognizer:
     name: Recognizer CI
-    uses: ./.github/workflows/build-check-app.yml
+    uses: ./.github/workflows/__CI__build-check-app.yml
     with:
       workdir: recognizer
       with-ffmpeg: true
 
   build_check_broadcaster:
     name: Broadcaster CI
-    uses: ./.github/workflows/build-check-app.yml
+    uses: ./.github/workflows/__CI__build-check-app.yml
     with:
       workdir: broadcaster
 
   build_check_nexus:
     name: Nexus CI
-    uses: ./.github/workflows/build-check-app.yml
+    uses: ./.github/workflows/__CI__build-check-app.yml
     with:
       workdir: nexus