كيفية إعداد CI/CD باستخدام GitHub Actions

mkdir -p .github/workflows
touch .github/workflows/deploy.yml

name: CI/CD

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  test:
    runs-on: ubuntu-latest

    services:
      mysql:
        image: mysql:8.4
        env:
          MYSQL_ROOT_PASSWORD: secret
          MYSQL_DATABASE: laravel_test
        ports:
          - 3306:3306
        options: --health-cmd="mysqladmin ping" --health-interval=10s --health-timeout=5s --health-retries=3

    steps:
      - uses: actions/checkout@v4

      - name: Set up PHP
        uses: shivammathur/setup-php@v2
        with:
          php-version: "8.3"
          extensions: mbstring, pdo_mysql, zip, bcmath
          coverage: none

      - name: Cache Composer packages
        uses: actions/cache@v4
        with:
          path: vendor
          key: ${{ runner.os }}-php-${{ hashFiles("**/composer.lock") }}
          restore-keys: ${{ runner.os }}-php-

      - name: Install dependencies
        run: composer install --no-dev --optimize-autoloader --no-interaction

      - name: Copy .env
        run: cp .env.example .env && php artisan key:generate

      - name: Run tests
        env:
          DB_CONNECTION: mysql
          DB_HOST: 127.0.0.1
          DB_PORT: 3306
          DB_DATABASE: laravel_test
          DB_USERNAME: root
          DB_PASSWORD: secret
        run: php artisan test --parallel

  deploy:
    runs-on: ubuntu-latest
    needs: test
    if: github.ref == "refs/heads/main" && github.event_name == "push"

    steps:
      - name: Deploy to server
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.SSH_HOST }}
          username: ${{ secrets.SSH_USER }}
          key: ${{ secrets.SSH_KEY }}
          port: 22
          script: |
            cd /var/www/myapp
            git pull origin main
            composer install --no-dev --optimize-autoloader
            php artisan migrate --force
            php artisan optimize
            php artisan view:cache
            chown -R www-data:www-data /var/www/myapp

# الأسرار التي يجب إنشاؤها في GitHub:
# SSH_HOST     — عنوان IP الخادم أو اسم المضيف
# SSH_USER     — مثل root أو deploy
# SSH_KEY      — المفتاح الخاص (المحتوى الكامل لـ ~/.ssh/id_ed25519)

# أنشئ مفتاح نشر مخصصاً (لا تعيد استخدام مفتاحك الشخصي)
ssh-keygen -t ed25519 -C "github-actions-deploy" -f ~/.ssh/deploy_key -N ""

# أضف المفتاح العام إلى الخادم
ssh-copy-id -i ~/.ssh/deploy_key.pub user@your-server

# الصق محتوى المفتاح الخاص في SSH_KEY في GitHub
cat ~/.ssh/deploy_key

  deploy:
    runs-on: ubuntu-latest
    needs: test
    environment: production          # يرتبط بـ GitHub Environment
    if: github.ref == "refs/heads/main" && github.event_name == "push"

    steps:
      - name: Deploy to production
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.SSH_HOST }}     # محدود ببيئة "production"
          username: ${{ secrets.SSH_USER }}
          key: ${{ secrets.SSH_KEY }}
          script: cd /var/www/myapp && git pull && php artisan optimize

    # في وظيفة test — ارفع الأصول المجمّعة
      - name: Build frontend
        run: npm ci && npm run build

      - uses: actions/upload-artifact@v4
        with:
          name: frontend-build
          path: public/build/

  deploy:
    needs: test
    runs-on: ubuntu-latest
    steps:
      - uses: actions/download-artifact@v4
        with:
          name: frontend-build
          path: public/build/

      # ثم انقل مجلد public/build/ إلى الخادم بـ rsync أو scp

  test:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        php: ["8.2", "8.3"]
        # node: [18, 20, 22]   # استبدل لمشاريع Node

    steps:
      - uses: actions/checkout@v4
      - uses: shivammathur/setup-php@v2
        with:
          php-version: ${{ matrix.php }}
      - run: composer install --no-interaction
      - run: php artisan test

# أعد تشغيل workflow فاشل من سطر الأوامر
gh run list --limit 5
gh run rerun <run-id>

# راقب run مباشرة
gh run watch <run-id>

# حمّل سجلات run فاشل
gh run view <run-id> --log-failed