Minimal production test on github

This commit splits up the existing ci.yml into multiple files, and adds
a new test that tries to bring up the production webserver from scratch
to make sure that it works.

Author: dutow

.github/workflows/docker-build.yml

@@ -0,0 +1,22 @@
+name: Docker Build
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  docker-build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Build app image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: Dockerfile
+          push: false
+          tags: hackorum:test

.github/workflows/prod-boot.yml

@@ -0,0 +1,46 @@
+name: Prod Boot
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  prod-boot:
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Prepare deploy env file
+        run: |
+          cp deploy/.env.example deploy/.env
+          # Override secrets/SSL for CI boot
+          ruby -e "require 'securerandom'; puts \"SECRET_KEY_BASE=#{SecureRandom.hex(64)}\"" >> deploy/.env
+          echo "FORCE_SSL=false" >> deploy/.env
+          echo "APP_HOST=localhost" >> deploy/.env
+
+      - name: Start database
+        run: docker compose -f deploy/docker-compose.yml up -d db
+
+      - name: Prepare database (migrations)
+        run: docker compose -f deploy/docker-compose.yml run --rm web bin/rails db:prepare
+
+      - name: Start web
+        run: docker compose -f deploy/docker-compose.yml up -d web
+
+      - name: Verify web healthcheck
+        run: |
+          for i in {1..30}; do
+            if docker compose -f deploy/docker-compose.yml exec web sh -lc "curl -fs http://localhost:3000/up"; then
+              exit 0
+            fi
+            sleep 5
+          done
+          docker compose -f deploy/docker-compose.yml logs --tail=200 web db
+          exit 1
+
+      - name: Teardown
+        if: always()
+        run: docker compose -f deploy/docker-compose.yml down -v

.github/workflows/ci.yml .github/workflows/test.yml.github/workflows/ci.yml renamed to .github/workflows/test.yml

@@ -1,4 +1,4 @@
-name: CI
+name: Tests
 
 on:
   push:
@@ -46,17 +46,3 @@ jobs:
 
       - name: Run specs
         run: bundle exec rspec
-
-  docker-build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-      - name: Build app image
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          file: Dockerfile
-          push: false
-          tags: hackorum:test