From ca75cd30deada84ba6506a03bf2b7d09b94af36e Mon Sep 17 00:00:00 2001
From: Oliver Braun <ob@cs.hm.edu>
Date: Mon, 20 Jul 2026 14:06:11 +0200
Subject: [PATCH] ci(deploy): auto-deploy the GUI via the self-hosted runner
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Mirror image of the backend (obcode/glabs) deploy job: a gated `deploy`
job on the shared self-hosted runner (label glabs-deploy) that, on a
release, pins GUI_TAG in the on-host .env and rolls only the `gui`
service. The docker-compose.yml lives in and is synced by the glabs repo;
here we only pull + up -d gui.

Gated by `if: vars.AUTO_DEPLOY == 'true'` — until the GUI runner exists
and the variable is set, the image is still built & pushed and this job is
skipped. See obcode/glabs deploy/README.md "Automatischer Deploy".

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .github/workflows/docker.yml | 26 ++++++++++++++++++++++++--
 1 file changed, 24 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 12655c3..87a958e 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -63,5 +63,27 @@ jobs:
           build-args: |
             APP_VERSION=${{ env.VERSION }}
 
-  # Der Deploy-Job (Self-hosted-Runner, on-host docker-compose) kommt mit
-  # Meilenstein F (deploy/), zusammen mit Caddyfile + docker-compose.yml.
+  # Roll the freshly pushed GUI image onto the deploy host. Mirror image of the backend
+  # (obcode/glabs) deploy job: same self-hosted runner label (glabs-deploy), same on-host
+  # deploy dir — but this job touches ONLY the `gui` service. The docker-compose.yml itself
+  # is synced by the backend repo's deploy job; here we just pin GUI_TAG and roll gui.
+  deploy:
+    needs: build-and-push-image
+    # Gate like the backend: only deploy once the GUI runner exists (repo variable
+    # AUTO_DEPLOY=true). Until then the image is still built & pushed; this job is skipped.
+    if: ${{ vars.AUTO_DEPLOY == 'true' }}
+    runs-on: [self-hosted, glabs-deploy]
+    env:
+      # The v-prefixed release tag (from whichever trigger fired). docker/metadata-action
+      # tags the image with this raw ref (v1.53.0), so GUI_TAG must carry the v too.
+      VERSION: ${{ github.event.release.tag_name || inputs.tag }}
+      DEPLOY_DIR: ${{ vars.DEPLOY_DIR || '/home/glabs/glabs/deploy' }}
+    steps:
+      - name: Deploy pinned GUI image
+        run: |
+          set -euo pipefail
+          cd "$DEPLOY_DIR"
+          sed -i "s/^GUI_TAG=.*/GUI_TAG=$VERSION/" .env
+          docker compose pull gui
+          docker compose up -d gui
+          docker image prune -f