Frontend API config and SSO toggles

.drone.yml

@@ -8,21 +8,27 @@ trigger:
     - pull_request
 
 steps:
-  - name: backend-sanity
+  - name: python-lint
     image: python:3.11-slim
     commands:
       - cd backend
-      - pip install --no-cache-dir -r requirements.txt
+      - pip install flake8
-      - python -m py_compile main.py auth.py daemons.py oidc_config.py
+      - flake8 . --count --select=E9,F63,F7,F82 --show-source --statistics
 
-  - name: frontend-build-check
+  - name: frontend-lint
     image: node:20-alpine
     commands:
       - cd frontend
       - npm ci --silent
-      - npm run build
       - npm run lint || echo "ESLint warnings found"
 
+  - name: python-security
+    image: python:3.11-slim
+    commands:
+      - cd backend
+      - pip install safety
+      - safety check --file=requirements.txt --exit-zero || echo "Security warnings found"
+
   - name: frontend-security
     image: node:20-alpine
     commands:
@@ -33,7 +39,7 @@ steps:
 ---
 kind: pipeline
 type: docker
-name: build-images
+name: build-backend
 
 trigger:
   branch:
@@ -55,9 +61,8 @@ steps:
       repo: registry.nevetime.ru/mc-panel-backend
       tags:
         - latest
-        - "${DRONE_BUILD_NUMBER}"
+        - ${DRONE_COMMIT_SHA:0:8}
-        - "${DRONE_COMMIT_SHA:0:8}"
+        - ${DRONE_BRANCH}
-        - "${DRONE_BRANCH}"
       auto_tag: true
       dockerfile: backend/Dockerfile
       context: backend
@@ -65,7 +70,33 @@ steps:
         from_secret: docker_username
       password:
         from_secret: docker_password
+      build_args:
+        - BUILD_DATE=${DRONE_BUILD_CREATED}
+        - VCS_REF=${DRONE_COMMIT_SHA}
+        - VERSION=${DRONE_TAG:-${DRONE_BRANCH}}
+    when:
+      event:
+        - push
+        - tag
 
+---
+kind: pipeline
+type: docker
+name: build-frontend
+
+trigger:
+  branch:
+    - main
+    - master
+    - develop
+  event:
+    - push
+    - tag
+
+depends_on:
+  - code-quality
+
+steps:
   - name: build-frontend-image
     image: plugins/docker
     settings:
@@ -73,12 +104,12 @@ steps:
       repo: registry.nevetime.ru/mc-panel-frontend
       tags:
         - latest
-        - "${DRONE_BUILD_NUMBER}"
+        - ${DRONE_COMMIT_SHA:0:8}
-        - "${DRONE_COMMIT_SHA:0:8}"
+        - ${DRONE_BRANCH}
-        - "${DRONE_BRANCH}"
       auto_tag: true
       dockerfile: frontend/Dockerfile
       context: frontend
+      target: production
       username:
         from_secret: docker_username
       password:
@@ -117,8 +148,8 @@ steps:
       repo: registry.nevetime.ru/mc-panel
       tags:
         - latest
-        - "${DRONE_COMMIT_SHA:0:8}"
+        - ${DRONE_COMMIT_SHA:0:8}
-        - "${DRONE_BRANCH}"
+        - ${DRONE_BRANCH}
       auto_tag: true
       dockerfile: Dockerfile
       context: .
@@ -134,3 +165,69 @@ steps:
       event:
         - push
         - tag
+
+---
+kind: pipeline
+type: docker
+name: deploy-staging
+
+trigger:
+  branch:
+    - develop
+  event:
+    - push
+
+depends_on:
+  - build-backend
+  - build-frontend
+  - build-monolith
+
+steps:
+  - name: deploy-separate-services
+    image: alpine:latest
+    environment:
+      STAGING_HOST:
+        from_secret: staging_host
+      STAGING_USER:
+        from_secret: staging_user
+      STAGING_KEY:
+        from_secret: staging_ssh_key
+    commands:
+      - apk add --no-cache openssh-client
+      - echo "Deploying separate services to staging..."
+      - echo "$STAGING_KEY" | base64 -d > /tmp/ssh_key
+      - chmod 600 /tmp/ssh_key
+      - ssh -o StrictHostKeyChecking=no -i /tmp/ssh_key $STAGING_USER@$STAGING_HOST "docker pull registry.nevetime.ru/mc-panel-backend:${DRONE_COMMIT_SHA:0:8} && docker pull registry.nevetime.ru/mc-panel-frontend:${DRONE_COMMIT_SHA:0:8}"
+
+---
+kind: pipeline
+type: docker
+name: deploy-production
+
+trigger:
+  ref:
+    - refs/tags/v*
+  event:
+    - tag
+
+depends_on:
+  - build-backend
+  - build-frontend
+  - build-monolith
+
+steps:
+  - name: deploy-separate-services
+    image: alpine:latest
+    environment:
+      PROD_HOST:
+        from_secret: production_host
+      PROD_USER:
+        from_secret: production_user
+      PROD_KEY:
+        from_secret: production_ssh_key
+    commands:
+      - apk add --no-cache openssh-client
+      - echo "Deploying separate services to production..."
+      - echo "$PROD_KEY" | base64 -d > /tmp/ssh_key
+      - chmod 600 /tmp/ssh_key
+      - ssh -o StrictHostKeyChecking=no -i /tmp/ssh_key $PROD_USER@$PROD_HOST "docker pull registry.nevetime.ru/mc-panel-backend:${DRONE_TAG} && docker pull registry.nevetime.ru/mc-panel-frontend:${DRONE_TAG}"