From dff3c7fc9cf6ddd869858038020d6af322cdf1fa Mon Sep 17 00:00:00 2001
From: Rafael Lopes <rafael.lopes@sothis.com.br>
Date: Tue, 21 Jul 2026 15:34:56 -0300
Subject: [PATCH] CHORE: Adiciona workflows Gitea Actions (deploy-dev e
 deploy-prod) via rsync

---
 .gitea/workflows/deploy-dev.yml  | 65 ++++++++++++++++++++++++++++++++
 .gitea/workflows/deploy-prod.yml | 65 ++++++++++++++++++++++++++++++++
 2 files changed, 130 insertions(+)
 create mode 100644 .gitea/workflows/deploy-dev.yml
 create mode 100644 .gitea/workflows/deploy-prod.yml

diff --git a/.gitea/workflows/deploy-dev.yml b/.gitea/workflows/deploy-dev.yml
new file mode 100644
index 0000000..2fdba8e
--- /dev/null
+++ b/.gitea/workflows/deploy-dev.yml
@@ -0,0 +1,65 @@
+name: Deploy Dev
+
+on:
+  push:
+    branches:
+      - dev
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    name: Deploy para VM Dev
+    runs-on: self-hosted
+    env:
+      DEPLOY_PATH: /opt/omnichannel
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Preflight
+        shell: bash
+        run: |
+          set -euo pipefail
+          echo "Runner: $(hostname)"
+          docker --version
+          docker compose version
+          psql --version
+
+      - name: Verificar secrets obrigatórios
+        shell: bash
+        env:
+          DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
+        run: |
+          set -euo pipefail
+          if [ -z "${DB_PASSWORD:-}" ]; then
+            echo "Secret DB_PASSWORD não configurado."
+            exit 1
+          fi
+
+      - name: Sync arquivos para o servidor
+        shell: bash
+        run: |
+          set -euo pipefail
+          rsync -az --delete \
+            --exclude='.git/' \
+            --exclude='.gitea/' \
+            --exclude='frontend/' \
+            --exclude='backend/' \
+            ./ "$DEPLOY_PATH"/
+
+      - name: Executar migrations
+        shell: bash
+        env:
+          PGPASSWORD: ${{ secrets.DB_PASSWORD }}
+        run: |
+          set -euo pipefail
+          for f in $(ls "$DEPLOY_PATH/database/migrations/"*.sql | sort); do
+            echo "Aplicando: $(basename "$f")"
+            psql \
+              -h ${{ secrets.DB_HOST }} \
+              -p ${{ secrets.DB_PORT }} \
+              -U ${{ secrets.DB_USER }} \
+              -d ${{ secrets.DB_NAME }} \
+              -f "$f"
+          done
diff --git a/.gitea/workflows/deploy-prod.yml b/.gitea/workflows/deploy-prod.yml
new file mode 100644
index 0000000..3b51a1f
--- /dev/null
+++ b/.gitea/workflows/deploy-prod.yml
@@ -0,0 +1,65 @@
+name: Deploy Prod
+
+on:
+  push:
+    branches:
+      - master
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    name: Deploy para VM Prod
+    runs-on: self-hosted-prod
+    env:
+      DEPLOY_PATH: /opt/omnichannel
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Preflight
+        shell: bash
+        run: |
+          set -euo pipefail
+          echo "Runner: $(hostname)"
+          docker --version
+          docker compose version
+          psql --version
+
+      - name: Verificar secrets obrigatórios
+        shell: bash
+        env:
+          DB_PASSWORD: ${{ secrets.PROD_DB_PASSWORD }}
+        run: |
+          set -euo pipefail
+          if [ -z "${DB_PASSWORD:-}" ]; then
+            echo "Secret PROD_DB_PASSWORD não configurado."
+            exit 1
+          fi
+
+      - name: Sync arquivos para o servidor
+        shell: bash
+        run: |
+          set -euo pipefail
+          rsync -az --delete \
+            --exclude='.git/' \
+            --exclude='.gitea/' \
+            --exclude='frontend/' \
+            --exclude='backend/' \
+            ./ "$DEPLOY_PATH"/
+
+      - name: Executar migrations
+        shell: bash
+        env:
+          PGPASSWORD: ${{ secrets.PROD_DB_PASSWORD }}
+        run: |
+          set -euo pipefail
+          for f in $(ls "$DEPLOY_PATH/database/migrations/"*.sql | sort); do
+            echo "Aplicando: $(basename "$f")"
+            psql \
+              -h ${{ secrets.PROD_DB_HOST }} \
+              -p ${{ secrets.PROD_DB_PORT }} \
+              -U ${{ secrets.PROD_DB_USER }} \
+              -d ${{ secrets.PROD_DB_NAME }} \
+              -f "$f"
+          done