azure-webapps-python.yml

name: Build and deploy Python app to Azure Web App

env:
  AZURE_WEBAPP_NAME: instantapply  # set this to the name of your Azure Web App
  PYTHON_VERSION: '3.11'
  DOCKER_REGISTRY: ghcr.io
  DOCKER_IMAGE_NAME: jeevanbhatta/instantapply

on:
  push:
    branches: [ "production" ]
  workflow_dispatch:

permissions:
  contents: read
  packages: write

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v4

      - name: Set up Node.js
        uses: actions/setup-node@v3
        with:
          node-version: '18'
          cache: 'npm'
          cache-dependency-path: '**/package-lock.json'
          
      - name: Build React frontend
        run: |
          cd react-frontend
          npm ci
          export CI=false
          npm run build
          echo "React build completed successfully"
          
      - name: Copy React build to backend/static
        run: |
          mkdir -p backend/static
          rm -rf backend/static/*
          cp -r react-frontend/build/* backend/static/
          echo "React build files copied to backend/static"
          ls -la backend/static

      - name: Set up Python version
        uses: actions/setup-python@v4
        with:
          python-version: ${{ env.PYTHON_VERSION }}
          cache: 'pip'
          cache-dependency-path: '**/requirements.txt'

      - name: Install Python dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r backend/requirements.txt

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v2

      - name: Login to GitHub Container Registry
        uses: docker/login-action@v2
        with:
          registry: ${{ env.DOCKER_REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push Docker image
        uses: docker/build-push-action@v4
        with:
          context: .
          push: true
          tags: |
            ${{ env.DOCKER_REGISTRY }}/${{ env.DOCKER_IMAGE_NAME }}:latest
            ${{ env.DOCKER_REGISTRY }}/${{ env.DOCKER_IMAGE_NAME }}:v1.0.${{ github.run_number }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

  deploy:
    permissions:
      contents: none
    runs-on: ubuntu-latest
    needs: build
    environment:
      name: 'Production'
      url: ${{ steps.deploy-to-webapp.outputs.webapp-url }}

    steps:
      - name: 'Login to Azure'
        uses: azure/login@v1
        with:
          creds: ${{ secrets.AZURE_CREDENTIALS }}

      # Configure Azure App Service to be able to pull the image from GitHub Container Registry
      - name: 'Configure Container Registry Authentication'
        uses: azure/cli@v1
        with:
          azcliversion: latest
          inlineScript: |
            # Configure Azure to authenticate with GitHub Container Registry
            az webapp config container set \
              --resource-group ${{ secrets.AZURE_RESOURCE_GROUP }} \
              --name ${{ env.AZURE_WEBAPP_NAME }} \
              --docker-registry-server-url https://${{ env.DOCKER_REGISTRY }} \
              --docker-registry-server-user ${{ github.actor }} \
              --docker-registry-server-password ${{ secrets.GITHUB_TOKEN }}
            
      - name: 'Deploy Docker container to Azure App Service'
        id: deploy-to-webapp
        uses: azure/webapps-deploy@v2
        with:
          app-name: ${{ env.AZURE_WEBAPP_NAME }}
          images: ${{ env.DOCKER_REGISTRY }}/${{ env.DOCKER_IMAGE_NAME }}:latest

      - name: 'Configure App Settings'
        uses: azure/cli@v1
        with:
          azcliversion: latest
          inlineScript: |
            az webapp config appsettings set --resource-group ${{ secrets.AZURE_RESOURCE_GROUP }} --name ${{ env.AZURE_WEBAPP_NAME }} --settings \
              FLASK_DEBUG=False \
              WEBSITES_PORT=8000 \
              WEBSITE_HTTPLOGGING_RETENTION_DAYS=3 \
              SCM_DO_BUILD_DURING_DEPLOYMENT=true \
              SECRET_KEY="${{ secrets.SECRET_KEY }}" \
              DATABASE_URL="${{ secrets.DATABASE_URL }}" \
              GEMINI_API_KEY="${{ secrets.GEMINI_API_KEY }}"

      - name: 'Configure Health Check'
        uses: azure/cli@v1
        with:
          azcliversion: latest
          inlineScript: |
            # Configure health check settings using generic-configurations
            az webapp config set \
              --resource-group ${{ secrets.AZURE_RESOURCE_GROUP }} \
              --name ${{ env.AZURE_WEBAPP_NAME }} \
              --generic-configurations '{"healthCheckPath": "/health"}' \
              --always-on true

            # Configure container settings
            az webapp config container set \
              --resource-group ${{ secrets.AZURE_RESOURCE_GROUP }} \
              --name ${{ env.AZURE_WEBAPP_NAME }} \
              --enable-app-service-storage true \
              --docker-registry-server-url https://${{ env.DOCKER_REGISTRY }}

            # Set application settings for health check
            az webapp config appsettings set \
              --resource-group ${{ secrets.AZURE_RESOURCE_GROUP }} \
              --name ${{ env.AZURE_WEBAPP_NAME }} \
              --settings \
                WEBSITES_CONTAINER_START_TIME_LIMIT=1800 \
                WEBSITES_ENABLE_APP_SERVICE_STORAGE=true \
                WEBSITE_HEALTHCHECK_MAXPINGFAILURES=3 \
                WEBSITE_HEALTHCHECK_PATH=/health