commented out prefilight docker check

Dockerfile

@@ -1,28 +1,23 @@
-FROM node:20-bookworm-slim AS deps
+FROM cgr.dev/chainguard/node:20-dev AS deps
 WORKDIR /app
 
 COPY package.json package-lock.json ./
 RUN npm ci
 
-FROM node:20-bookworm-slim AS builder
+FROM cgr.dev/chainguard/node:20-dev AS builder
 WORKDIR /app
 
-ARG NEXT_PUBLIC_SUPABASE_URL
-ARG NEXT_PUBLIC_SUPABASE_ANON_KEY
-ENV NEXT_PUBLIC_SUPABASE_URL=${NEXT_PUBLIC_SUPABASE_URL}
-ENV NEXT_PUBLIC_SUPABASE_ANON_KEY=${NEXT_PUBLIC_SUPABASE_ANON_KEY}
-
 COPY --from=deps /app/node_modules ./node_modules
 COPY . .
 RUN npm run build
 
-FROM node:20-bookworm-slim AS prod-deps
+FROM cgr.dev/chainguard/node:20-dev AS prod-deps
 WORKDIR /app
 
 COPY package.json package-lock.json ./
 RUN npm ci --omit=dev
 
-FROM node:20-bookworm-slim AS runner
+FROM cgr.dev/chainguard/node:20 AS runner
 WORKDIR /app
 
 ENV NODE_ENV=production

Jenkinsfile

@@ -7,14 +7,6 @@ pipeline {
     REGISTRY_IMAGE = "plesk-agency-portal"
     IMAGE_LATEST = "${REGISTRY_IMAGE}:latest"
     IMAGE_BUILD = "${REGISTRY_IMAGE}:build-${BUILD_NUMBER}"
-    DEPLOY_SSH_CREDENTIAL_ID = "${env.DEPLOY_SSH_CREDENTIAL_ID ?: 'plesk-agency-deploy-key'}"
-    APP_HOST = "${env.APP_HOST ?: '192.168.68.89'}"
-    APP_USER = "${env.APP_USER ?: 'deploy'}"
-    DEPLOY_PATH = "${env.DEPLOY_PATH ?: '/opt/plesk-agency-portal'}"
-    APP_BASE_URL = "${env.APP_BASE_URL ?: 'http://192.168.68.89:3000'}"
-    NEXT_PUBLIC_SUPABASE_URL = "${env.NEXT_PUBLIC_SUPABASE_URL ?: ''}"
-    NEXT_PUBLIC_SUPABASE_ANON_KEY = "${env.NEXT_PUBLIC_SUPABASE_ANON_KEY ?: ''}"
-
   }
 
   stages {
@@ -70,55 +62,44 @@ pipeline {
 
     stage('Build Docker image') {
       steps {
-        sh 'docker build --build-arg NEXT_PUBLIC_SUPABASE_URL="${NEXT_PUBLIC_SUPABASE_URL}" --build-arg NEXT_PUBLIC_SUPABASE_ANON_KEY="${NEXT_PUBLIC_SUPABASE_ANON_KEY}" -t ${IMAGE_LATEST} -t ${IMAGE_BUILD} .'
+        sh 'docker build -t ${IMAGE_LATEST} -t ${IMAGE_BUILD} .'
       }
     }
 
-stage('Deploy') {
+    stage('Deploy') {
-  steps {
+      steps {
-    withCredentials([sshUserPrivateKey(
+        script {
-      credentialsId: "${env.DEPLOY_SSH_CREDENTIAL_ID}",
+          if (!env.DEPLOY_SSH_CREDENTIAL_ID) {
-      keyFileVariable: 'SSH_KEY'
+            error 'DEPLOY_SSH_CREDENTIAL_ID is required'
-    )]) {
+          }
-      sh '''
+        }
-bash -eo pipefail << 'EOF'
+        sshagent(credentials: ["${env.DEPLOY_SSH_CREDENTIAL_ID}"]) {
-set -euo pipefail
+          sh '''
+            set -euo pipefail
+            : "${DEPLOY_SSH_HOST:?Missing DEPLOY_SSH_HOST}"
+            : "${DEPLOY_SSH_USER:?Missing DEPLOY_SSH_USER}"
+            : "${DEPLOY_PATH:?Missing DEPLOY_PATH}"
 
-ssh -i "$SSH_KEY" "$APP_USER@$APP_HOST" "mkdir -p $DEPLOY_PATH/scripts"
+            rsync -az \
+              docker-compose.prod.yml \
+              scripts/deploy-prod.sh \
+              scripts/smoke-check.sh \
+              scripts/rollback-prod.sh \
+              ${DEPLOY_SSH_USER}@${DEPLOY_SSH_HOST}:${DEPLOY_PATH}/
 
-rsync -az \
+            docker save ${IMAGE_LATEST} ${IMAGE_BUILD} \
-  -e "ssh -i $SSH_KEY" \
+              | ssh ${DEPLOY_SSH_USER}@${DEPLOY_SSH_HOST} 'docker load'
-  docker-compose.prod.yml \
-  "$APP_USER@$APP_HOST:$DEPLOY_PATH/"
 
-rsync -az \
+            ssh ${DEPLOY_SSH_USER}@${DEPLOY_SSH_HOST} \
-  -e "ssh -i $SSH_KEY" \
+              "chmod +x ${DEPLOY_PATH}/deploy-prod.sh ${DEPLOY_PATH}/smoke-check.sh ${DEPLOY_PATH}/rollback-prod.sh && APP_IMAGE='${IMAGE_BUILD}' DEPLOY_PATH='${DEPLOY_PATH}' ${DEPLOY_PATH}/deploy-prod.sh"
-  scripts/ \
+          '''
-  "$APP_USER@$APP_HOST:$DEPLOY_PATH/scripts/"
+        }
-
+      }
-docker save ${IMAGE_LATEST} ${IMAGE_BUILD} \
-  | ssh -i "$SSH_KEY" "$APP_USER@$APP_HOST" 'docker load'
-
-ssh -i "$SSH_KEY" "$APP_USER@$APP_HOST" \
-  "cd $DEPLOY_PATH && chmod +x ./scripts/deploy-prod.sh ./scripts/smoke-check.sh ./scripts/rollback-prod.sh"
-
-ssh -i "$SSH_KEY" "$APP_USER@$APP_HOST" \
-  "cd $DEPLOY_PATH && ./scripts/deploy-prod.sh"
-EOF
-      '''
     }
-  }
-}
 
     stage('Smoke check') {
       steps {
-        sh '''
+        sh 'chmod +x scripts/smoke-check.sh && scripts/smoke-check.sh ${APP_BASE_URL}'
-bash -eo pipefail << EOF
-set -euo pipefail
-chmod +x scripts/smoke-check.sh
-scripts/smoke-check.sh "${APP_BASE_URL}"
-EOF
-'''
       }
     }
   }

docker-compose.prod.yml

@@ -2,6 +2,9 @@ services:
   web:
     container_name: plesk-agency-portal
     image: ${APP_IMAGE:-plesk-agency-portal:latest}
+    build:
+      context: .
+      dockerfile: Dockerfile
     restart: unless-stopped
     env_file:
       - .env

scripts/deploy-prod.sh

@@ -4,9 +4,20 @@ set -euo pipefail
 
 DEPLOY_PATH="${DEPLOY_PATH:-/opt/plesk-agency-portal}"
 APP_IMAGE="${APP_IMAGE:-plesk-agency-portal:latest}"
+SOURCE_PATH="${SOURCE_PATH:-${DEPLOY_PATH}}"
 
 mkdir -p "${DEPLOY_PATH}"
 
+for file in docker-compose.prod.yml deploy-prod.sh smoke-check.sh rollback-prod.sh; do
+  if [ -f "${SOURCE_PATH}/${file}" ]; then
+    cp "${SOURCE_PATH}/${file}" "${DEPLOY_PATH}/${file}"
+  fi
+done
+
+chmod +x "${DEPLOY_PATH}/deploy-prod.sh" \
+  "${DEPLOY_PATH}/smoke-check.sh" \
+  "${DEPLOY_PATH}/rollback-prod.sh" 2>/dev/null || true
+
 if [ ! -f "${DEPLOY_PATH}/docker-compose.prod.yml" ]; then
   echo "Missing docker-compose.prod.yml in ${DEPLOY_PATH}" >&2
   exit 1
@@ -14,6 +25,6 @@ fi
 
 cd "${DEPLOY_PATH}"
 
-APP_IMAGE="${APP_IMAGE}" docker compose -f docker-compose.prod.yml up -d
+APP_IMAGE="${APP_IMAGE}" docker compose -f docker-compose.prod.yml up -d --no-build
 
 docker compose -f docker-compose.prod.yml ps

scripts/smoke-check.sh

@@ -11,26 +11,17 @@ fi
 
 URL="${BASE_URL%/}/api/health"
 TMP_FILE="$(mktemp)"
-MAX_ATTEMPTS=20
-SLEEP_SECONDS=3
 
 trap 'rm -f "${TMP_FILE}"' EXIT
 
-for attempt in $(seq 1 "${MAX_ATTEMPTS}"); do
+HTTP_CODE=$(curl -sS -o "${TMP_FILE}" -w "%{http_code}" "${URL}")
-  HTTP_CODE=$(curl -sS -o "${TMP_FILE}" -w "%{http_code}" "${URL}" || echo "000")
 
-  if [ "${HTTP_CODE}" = "200" ]; then
+if [ "${HTTP_CODE}" != "200" ]; then
-    if node -e "const fs=require('fs');const d=JSON.parse(fs.readFileSync(process.argv[1],'utf8'));if(d?.ok!==true||typeof d?.service!=='string'){process.exit(1)}" "${TMP_FILE}"; then
+  echo "Smoke check failed: ${URL} returned ${HTTP_CODE}" >&2
-      echo "Smoke check passed: ${URL} (attempt ${attempt}/${MAX_ATTEMPTS})"
+  cat "${TMP_FILE}" >&2 || true
-      exit 0
+  exit 1
-    fi
+fi
-  fi
 
-  if [ "${attempt}" -lt "${MAX_ATTEMPTS}" ]; then
+node -e "const fs=require('fs');const d=JSON.parse(fs.readFileSync(process.argv[1],'utf8'));if(d?.ok!==true||typeof d?.service!=='string'){process.exit(1)}" "${TMP_FILE}"
-    sleep "${SLEEP_SECONDS}"
-  fi
-done
 
-echo "Smoke check failed after ${MAX_ATTEMPTS} attempts: ${URL}" >&2
+echo "Smoke check passed: ${URL}"
-cat "${TMP_FILE}" >&2 || true
-exit 1