pleskSaas/Jenkinsfile

pipeline {
  // Build + deploy stages require Docker CLI/daemon access on the Jenkins node.
  // Ensure this label maps to an agent with Docker installed and usable.
  //update
  agent any

  environment {
    REGISTRY_IMAGE = "plesk-agency-portal"
    IMAGE_LATEST = "${REGISTRY_IMAGE}:latest"
    IMAGE_BUILD = "${REGISTRY_IMAGE}:build-${BUILD_NUMBER}"
    DEPLOY_SSH_CREDENTIAL_ID = "${env.DEPLOY_SSH_CREDENTIAL_ID ?: 'plesk-agency-deploy-key'}"
    APP_HOST = "${env.APP_HOST ?: '192.168.68.89'}"
    APP_USER = "${env.APP_USER ?: 'deploy'}"
    DEPLOY_PATH = "${env.DEPLOY_PATH ?: '/opt/plesk-agency-portal'}"
    APP_BASE_URL = "${env.APP_BASE_URL ?: 'https://portal.rdbcloud.co.uk'}"
    NEXT_PUBLIC_APP_URL = "${env.NEXT_PUBLIC_APP_URL ?: 'https://portal.rdbcloud.co.uk'}"

  }

  stages {
    // stage('Preflight') {
    //   steps {
    //     sh '''
    //       set -euo pipefail

    //       if ! command -v docker >/dev/null 2>&1; then
    //         echo "Docker CLI is not available on this Jenkins agent."
    //         echo "Run this pipeline on a Docker-capable node or install Docker on the current agent."
    //         exit 1
    //       fi

    //       if ! docker version >/dev/null 2>&1; then
    //         echo "Docker is installed but not usable by Jenkins (daemon/socket/permissions issue)."
    //         exit 1
    //       fi
    //     '''
    //   }
    // }

    stage('Checkout') {
      steps {
        checkout scm
      }
    }

    stage('Install dependencies') {
      steps {
        sh 'npm ci'
      }
    }

    // stage('Lint') {
    //   steps {
    //     script {
    //       def hasLint = sh(script: "node -e \"const fs=require('fs');const p=require('./package.json');process.exit(p?.scripts?.lint?0:1)\"", returnStatus: true)
    //       if (hasLint == 0) {
    //         sh 'npm run lint'
    //       } else {
    //         echo 'No lint script configured; skipping lint stage.'
    //       }
    //     }
    //   }
    // }

    stage('Build application') {
      steps {
        withCredentials([
          string(credentialsId: 'supabase-public-url', variable: 'SUPABASE_PUBLIC_URL'),
          string(credentialsId: 'supabase-public-anon-key', variable: 'NEXT_PUBLIC_SUPABASE_ANON_KEY')
        ]) {
          sh '''
            NEXT_PUBLIC_SUPABASE_URL="$SUPABASE_PUBLIC_URL" \
            SUPABASE_URL="$SUPABASE_PUBLIC_URL" \
            NEXT_PUBLIC_APP_URL="$NEXT_PUBLIC_APP_URL" \
            npm run build
          '''
        }
      }
    }

    stage('Build Docker image') {
      steps {
        withCredentials([
          string(credentialsId: 'supabase-public-url', variable: 'SUPABASE_PUBLIC_URL'),
          string(credentialsId: 'supabase-public-anon-key', variable: 'NEXT_PUBLIC_SUPABASE_ANON_KEY')
        ]) {
          sh 'docker build --build-arg NEXT_PUBLIC_SUPABASE_URL="$SUPABASE_PUBLIC_URL" --build-arg SUPABASE_URL="$SUPABASE_PUBLIC_URL" --build-arg NEXT_PUBLIC_APP_URL="$NEXT_PUBLIC_APP_URL" --build-arg NEXT_PUBLIC_SUPABASE_ANON_KEY="$NEXT_PUBLIC_SUPABASE_ANON_KEY" --build-arg BUILD_CACHE_BUSTER="${BUILD_NUMBER}" -t ${IMAGE_LATEST} -t ${IMAGE_BUILD} .'
        }
      }
    }

stage('Deploy') {
  steps {
    sh '''
bash <<'EOF'
set -euxo pipefail

SSH_KEY="/var/lib/jenkins/.ssh/plesk_agency_deploy"
SSH_USER="deploy"
SSH_COMMON_OPTS="-i ${SSH_KEY} -o BatchMode=yes -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null"
SSH_OPTS="-n ${SSH_COMMON_OPTS}"
RSYNC_SSH="ssh ${SSH_COMMON_OPTS}"

echo "SSH user from configured deploy key: ${SSH_USER}"
echo "SSH key file path: ${SSH_KEY}"
ls -l "${SSH_KEY}"
ssh-keygen -y -f "${SSH_KEY}"

echo "Testing remote SSH connectivity"
ssh -n ${SSH_OPTS} "${SSH_USER}@${APP_HOST}" "whoami && hostname && pwd"

echo "Deploying image tag: ${IMAGE_BUILD}"
docker image inspect "${IMAGE_BUILD}" --format='{{.Id}} {{.RepoTags}}'

ssh -n ${SSH_OPTS} "$SSH_USER@$APP_HOST" "mkdir -p $DEPLOY_PATH/scripts"

rsync -az \
  -e "${RSYNC_SSH}" \
  docker-compose.prod.yml \
  "$SSH_USER@$APP_HOST:$DEPLOY_PATH/"

rsync -az \
  -e "${RSYNC_SSH}" \
  scripts/ \
  "$SSH_USER@$APP_HOST:$DEPLOY_PATH/scripts/"

IMAGE_TAR="plesk-agency-portal-build.tar"
echo "Creating image archive: ${IMAGE_TAR}"
docker save -o "${IMAGE_TAR}" "${IMAGE_BUILD}"
ls -lh "${IMAGE_TAR}"
sha256sum "${IMAGE_TAR}"

echo "Copying image archive to remote host via scp"
scp ${SSH_COMMON_OPTS} "${IMAGE_TAR}" "$SSH_USER@$APP_HOST:$DEPLOY_PATH/"

echo "Verifying image archive exists on remote host"
ssh -n ${SSH_OPTS} "$SSH_USER@$APP_HOST" "ls -lh $DEPLOY_PATH/plesk-agency-portal-build.tar"
ssh -n ${SSH_OPTS} "$SSH_USER@$APP_HOST" "sha256sum $DEPLOY_PATH/plesk-agency-portal-build.tar"

echo "Loading image archive on remote host"
ssh -n ${SSH_OPTS} "$SSH_USER@$APP_HOST" "docker load -i $DEPLOY_PATH/plesk-agency-portal-build.tar"

echo "Verifying exact image tag is available on remote host"
ssh -n ${SSH_OPTS} "$SSH_USER@$APP_HOST" "docker image inspect ${IMAGE_BUILD} --format='{{.Id}} {{.RepoTags}}'"

ssh -n ${SSH_OPTS} "$SSH_USER@$APP_HOST" \
  "cd $DEPLOY_PATH && chmod +x ./scripts/deploy-prod.sh ./scripts/smoke-check.sh ./scripts/rollback-prod.sh"

echo "Running remote deploy script with exact image tag"
ssh -n ${SSH_OPTS} "$SSH_USER@$APP_HOST" \
  "cd $DEPLOY_PATH && APP_IMAGE='${IMAGE_BUILD}' ./scripts/deploy-prod.sh"

echo "Printing final running container image metadata"
ssh -n ${SSH_OPTS} "$SSH_USER@$APP_HOST" "docker inspect plesk-agency-portal --format='{{.Image}} {{.Created}}'"
EOF
    '''
  }
}

    stage('Smoke check') {
      steps {
        sh '''
bash -eo pipefail << EOF
set -euo pipefail
chmod +x scripts/smoke-check.sh
scripts/smoke-check.sh "${APP_BASE_URL}"
EOF
'''
      }
    }
  }
}