adding reverse proxy with ssl

.gitea/workflows/cicd.yaml

@@ -1,27 +1,20 @@
 name: Build and Deploy Demo App
-
 on:
   push:
     branches:
-      - main  # Or whichever branch you want to trigger on
-
+      - main
 jobs:
   build-and-deploy:
-    runs-on: ubuntu-latest  # Use a label that supports Docker; adjust if needed (e.g., cth-ubuntu-latest)
-
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
-
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
-
       - name: Build Docker image
         run: docker build -t demo-app:latest .
-
       - name: Save Docker image to tar
         run: docker save demo-app:latest > demo-app.tar
-
       - name: Set up SSH
         run: |
           apt update && apt install -y openssh-client
@@ -31,16 +24,41 @@ jobs:
           eval "$(ssh-agent -s)"
           ssh-add ~/.ssh/id_ed25519
           ssh-keyscan -p ${{ secrets.SERVER_PORT }} ${{ secrets.SERVER_HOST }} >> ~/.ssh/known_hosts
-
-      - name: Copy tar to server via SCP
-        run: scp -o StrictHostKeyChecking=no -P ${{ secrets.SERVER_PORT }} demo-app.tar ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}:${{ secrets.DEPLOY_PATH }}demo-app.tar
-
+      - name: Copy files to server via SCP
+        run: |
+          scp -o StrictHostKeyChecking=no -P ${{ secrets.SERVER_PORT }} demo-app.tar ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}:${{ secrets.DEPLOY_PATH }}demo-app.tar
+          scp -o StrictHostKeyChecking=no -P ${{ secrets.SERVER_PORT }} docker-compose.yml ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}:${{ secrets.DEPLOY_PATH }}docker-compose.yml
+          scp -o StrictHostKeyChecking=no -P ${{ secrets.SERVER_PORT }} -r nginx_user_conf.d ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}:${{ secrets.DEPLOY_PATH }}nginx_user_conf.d
       - name: Deploy on server via SSH
         run: |
           ssh -o StrictHostKeyChecking=no -p ${{ secrets.SERVER_PORT }} ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }} << EOF
-            docker load -i ${{ secrets.DEPLOY_PATH }}demo-app.tar
-            docker stop demo-app || true
-            docker rm demo-app || true
-            docker run -d --name demo-app -p 5000:5000 --restart unless-stopped demo-app:latest
-            rm ${{ secrets.DEPLOY_PATH }}demo-app.tar  # Clean up
+            cd ${{ secrets.DEPLOY_PATH }}
+
+            # Check and install Docker if not present (Ubuntu/Debian assumed)
+            if ! command -v docker &> /dev/null; then
+              sudo apt update -y
+              sudo apt install -y ca-certificates curl
+              sudo install -m 0755 -d /etc/apt/keyrings
+              sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
+              sudo chmod a+r /etc/apt/keyrings/docker.asc
+              echo "deb [arch=\$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu \$(. /etc/os-release && echo "\$VERSION_CODENAME") stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
+              sudo apt update -y
+              sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
+              sudo systemctl start docker
+              sudo systemctl enable docker
+            fi
+
+            # Check and install Docker Compose if not present
+            if ! command -v docker-compose &> /dev/null; then
+              sudo curl -L "https://github.com/docker/compose/releases/latest/download/docker-compose-\$(uname -s)-\$(uname -m)" -o /usr/local/bin/docker-compose
+              sudo chmod +x /usr/local/bin/docker-compose
+            fi
+
+            # Load image and deploy with Compose
+            docker load -i demo-app.tar
+            docker-compose down || true  # Graceful stop
+            docker-compose up -d
+
+            # Cleanup
+            rm demo-app.tar
           EOF