From dbd9dc28af0fb327f622889d0607b689ae996c6e Mon Sep 17 00:00:00 2001
From: juancwu <git@juancwu.dev>
Date: Sat, 14 Feb 2026 11:26:57 -0500
Subject: [PATCH] feat: run tests before deploy

---
 .forgejo/workflows/deploy.yaml | 93 ++++++++++++++++++++--------------
 1 file changed, 56 insertions(+), 37 deletions(-)

diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml
index e9e2bca..cd3b57d 100644
--- a/.forgejo/workflows/deploy.yaml
+++ b/.forgejo/workflows/deploy.yaml
@@ -1,40 +1,59 @@
 name: Deploy
 on:
-  push:
-    tags:
-      - 'v*'
+    push:
+        tags:
+            - 'v*'
 jobs:
-  build-and-deploy:
-    runs-on: ubuntu-full-24.04
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-      - name: Build
-        run: task build
-      - name: Setup SSH
-        run: |
-          mkdir -p ~/.ssh
-          echo "${{ secrets.SSH_KEY }}" > ~/.ssh/deploy_key
-          chmod 600 ~/.ssh/deploy_key
-          ssh-keyscan -H ${{ secrets.SSH_HOST }} >> ~/.ssh/known_hosts
-      - name: Deploy binary
-        run: |
-          SSH_CMD="ssh -i ~/.ssh/deploy_key ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}"
-          ${SSH_CMD} "cp ${{ secrets.DEPLOY_PATH }}/budgit ${{ secrets.DEPLOY_PATH }}/budgit.prev 2>/dev/null || true"
-          scp -i ~/.ssh/deploy_key ./dist/budgit ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}:${{ secrets.DEPLOY_PATH }}/budgit.new
-          ${SSH_CMD} "mv ${{ secrets.DEPLOY_PATH }}/budgit.new ${{ secrets.DEPLOY_PATH }}/budgit && sudo systemctl restart budgit"
-      - name: Verify deployment
-        run: |
-          sleep 5
-          for i in 1 2 3 4 5; do
-            status=$(curl -s -o /dev/null -w "%{http_code}" "${{ secrets.APP_URL }}/healthz" || true)
-            [ "$status" = "200" ] && echo "Health check passed" && exit 0
-            echo "Attempt $i: got $status, retrying in 3s..."
-            sleep 3
-          done
-          echo "Health check failed" && exit 1
-      - name: Rollback on failure
-        if: failure()
-        run: |
-          SSH_CMD="ssh -i ~/.ssh/deploy_key ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}"
-          ${SSH_CMD} "[ -f ${{ secrets.DEPLOY_PATH }}/budgit.prev ] && mv ${{ secrets.DEPLOY_PATH }}/budgit.prev ${{ secrets.DEPLOY_PATH }}/budgit && sudo systemctl restart budgit"
+    build-and-deploy:
+        runs-on: ubuntu-full-24.04
+        services:
+            postgres:
+                image: postgres:16-alpine
+                env:
+                    POSTGRES_USER: budgit_test
+                    POSTGRES_PASSWORD: testpass
+                    POSTGRES_DB: budgit_test
+                options: >-
+                    --health-cmd "pg_isready -U budgit_test -d budgit_test"
+                    --health-interval 5s
+                    --health-timeout 3s
+                    --health-retries 10
+                    --health-start-period 10s
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+            - name: Run tests
+              env:
+                  BUDGIT_TEST_POSTGRES_URL: 'postgres://budgit_test:testpass@postgres:5432/budgit_test?sslmode=disable'
+              run: |
+                  go tool templ generate
+                  task test:integration
+            - name: Build
+              run: task build
+            - name: Setup SSH
+              run: |
+                  mkdir -p ~/.ssh
+                  echo "${{ secrets.SSH_KEY }}" > ~/.ssh/deploy_key
+                  chmod 600 ~/.ssh/deploy_key
+                  ssh-keyscan -H ${{ secrets.SSH_HOST }} >> ~/.ssh/known_hosts
+            - name: Deploy binary
+              run: |
+                  SSH_CMD="ssh -i ~/.ssh/deploy_key ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}"
+                  ${SSH_CMD} "cp ${{ secrets.DEPLOY_PATH }}/budgit ${{ secrets.DEPLOY_PATH }}/budgit.prev 2>/dev/null || true"
+                  scp -i ~/.ssh/deploy_key ./dist/budgit ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}:${{ secrets.DEPLOY_PATH }}/budgit.new
+                  ${SSH_CMD} "mv ${{ secrets.DEPLOY_PATH }}/budgit.new ${{ secrets.DEPLOY_PATH }}/budgit && sudo systemctl restart budgit"
+            - name: Verify deployment
+              run: |
+                  sleep 5
+                  for i in 1 2 3 4 5; do
+                    status=$(curl -s -o /dev/null -w "%{http_code}" "${{ secrets.APP_URL }}/healthz" || true)
+                    [ "$status" = "200" ] && echo "Health check passed" && exit 0
+                    echo "Attempt $i: got $status, retrying in 3s..."
+                    sleep 3
+                  done
+                  echo "Health check failed" && exit 1
+            - name: Rollback on failure
+              if: failure()
+              run: |
+                  SSH_CMD="ssh -i ~/.ssh/deploy_key ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}"
+                  ${SSH_CMD} "[ -f ${{ secrets.DEPLOY_PATH }}/budgit.prev ] && mv ${{ secrets.DEPLOY_PATH }}/budgit.prev ${{ secrets.DEPLOY_PATH }}/budgit && sudo systemctl restart budgit"