Gitea + Dokploy & Coolify: Auto-Deploy on Every Push

# On your deployment VPS (can be same or different from Gitea VPS)
curl -sSL https://dokploy.com/install.sh | sh

# Dokploy installs Docker, sets up Traefik, and starts itself
# Access the UI at: http://YOUR_VPS_IP:3000

# The installer will prompt you to create an admin account on first visit

# Dokploy webhook URL format:
https://your-dokploy-domain.com/api/deploy/webhook/APPLICATION_ID

# In Gitea (Repository > Settings > Webhooks > Add Webhook > Gitea)
# Target URL: (paste Dokploy URL)
# Secret: (copy from Dokploy application settings)
# Trigger on: Push Events
# Branch filter: main

# Test the webhook with the 'Test Delivery' button in Gitea

# In Dokploy application: Source > Image
# Registry URL: git.yourdomain.com
# Image: your-org/myapp
# Tag: latest (or use a specific SHA tag from CI)

# Add registry credentials:
# Registry Username: your_gitea_user
# Registry Password: YOUR_GITEA_PAT

# Then configure a deploy webhook to be called from your CI pipeline:

# In .gitea/workflows/deploy.yml:
- name: Trigger Dokploy deploy
  run: |
    curl -X POST \
      -H 'Content-Type: application/json' \
      -H 'x-webhook-token: ${{ secrets.DOKPLOY_WEBHOOK_SECRET }}' \
      https://your-dokploy-domain.com/api/deploy/webhook/YOUR_APP_ID

# Install Coolify
curl -fsSL https://cdn.coollabs.io/coolify/install.sh | bash

# Access UI at: http://YOUR_VPS_IP:8000
# Complete the setup wizard to create your admin account

# Find the webhook URL in Coolify:
# Service > Configuration > Deploy Webhook URL

# Add to Gitea repository secrets as COOLIFY_WEBHOOK_URL

# In your Gitea Actions workflow:
- name: Trigger Coolify deploy
  if: github.ref == 'refs/heads/main'
  run: |
    curl --request GET \
      --url '${{ secrets.COOLIFY_WEBHOOK_URL }}' \
      --header 'Authorization: Bearer ${{ secrets.COOLIFY_TOKEN }}'

name: Build, Publish, and Deploy

on:
  push:
    branches: [main]

env:
  REGISTRY: git.yourdomain.com
  IMAGE_NAME: your-org/myapp

jobs:
  build-and-push:
    runs-on: ubuntu-22.04
    outputs:
      image-tag: ${{ steps.meta.outputs.tags }}
    steps:
      - uses: actions/checkout@v4

      - name: Set image tag
        id: meta
        run: |
          SHA_SHORT=${GITEA_SHA:0:8}
          echo "tags=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:$SHA_SHORT" >> $GITHUB_OUTPUT

      - name: Login to Gitea Registry
        run: |
          echo ${{ secrets.GITEA_DEPLOY_TOKEN }} | \
            docker login ${{ env.REGISTRY }} -u ${{ gitea.actor }} --password-stdin

      - name: Build and push
        run: |
          docker build -t ${{ steps.meta.outputs.tags }} .
          docker push ${{ steps.meta.outputs.tags }}
          docker tag ${{ steps.meta.outputs.tags }} ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest

  deploy:
    needs: build-and-push
    runs-on: ubuntu-22.04
    steps:
      - name: Trigger deploy webhook
        run: |
          curl -X POST \
            -H 'Content-Type: application/json' \
            -H 'x-webhook-token: ${{ secrets.DEPLOY_WEBHOOK_SECRET }}' \
            ${{ secrets.DEPLOY_WEBHOOK_URL }}

# In your Dockerfile, add a HEALTHCHECK instruction:
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
  CMD curl -f http://localhost:3000/health || exit 1

# In Dokploy application settings > Advanced:
# Health Check Path: /health
# Health Check Interval: 30s

# Traefik waits for the health check to pass before routing traffic
# to the new container, providing zero-downtime deployments

# Manual rollback via Dokploy UI:
# Applications > Your App > Deployments > Select previous > Redeploy

# Or via API:
curl -X POST \
  -H 'Authorization: Bearer YOUR_DOKPLOY_TOKEN' \
  https://your-dokploy-domain.com/api/deployments/DEPLOYMENT_ID/redeploy

# Tag Docker images with both SHA and version to make rollbacks predictable:
docker tag myapp:latest myapp:v1.2.3
docker push git.yourdomain.com/your-org/myapp:v1.2.3

# .gitea/workflows/staging.yml
on:
  push:
    branches: [develop]
# (same build steps, trigger staging webhook)

# .gitea/workflows/production.yml
on:
  push:
    branches: [main]
# (same build steps, require manual approval then trigger prod webhook)

jobs:
  deploy-production:
    environment:
      name: production
      url: https://app.yourdomain.com
    # In Gitea: Create an 'environment' with required reviewers
    # The workflow pauses here until approved
    runs-on: ubuntu-22.04
    steps:
      - name: Deploy to production
        run: curl -X POST ${{ secrets.PROD_WEBHOOK_URL }}