Makefile

-include .env

usage:
	@echo "\nUsage : \033[0;35mmake <commands>\033[0m\n"
	@echo "The following commands are available:"
	@echo "\n\033[0;34m--- Setup ---\033[0m"
	@echo "\033[0;35msetup\033[0m\t\t\tConfigures the \033[0;37mgcloud\033[0m SDK before running other commands"
	@echo "\033[0;35msetup.cloud\033[0m\t\tInitializes the Google Cloud Project for the first time"
	@echo "\033[0;35msetup.bucket\033[0m\t\tInitializes the Google Cloud Storage bucket for the first time"
	@echo "\033[0;35msetup.firestore\033[0m\t\tInitializes the Google Cloud Firestore database for the first time"
	@echo "\033[0;35msetup.iam\033[0m\t\tCreates the Google Cloud IAM service account associated with the Cloud Run servers"
	@echo "\n\033[0;34m--- Build ---\033[0m"
	@echo "\033[0;35mbuild.lighthouse\033[0m\tBuilds the Lighthouse Server Cloud Run Docker image"
	@echo "\033[0;35mbuild.phpcs\033[0m\t\tBuilds the PHPCS Server Cloud Run Docker image"
	@echo "\033[0;35mbuild.sync\033[0m\t\tBuilds the Sync Server Cloud Run Docker image"
	@echo "\n\033[0;34m--- Push ---\033[0m"
	@echo "\033[0;35mpush.lighthouse\033[0m\t\tPushes the Lighthouse Server Cloud Run Docker image to Container Registry"
	@echo "\033[0;35mpush.phpcs\033[0m\t\tPushes the PHPCS Server Cloud Run Docker image to Container Registry"
	@echo "\033[0;35mpush.sync\033[0m\t\tPushes the Sync Server Cloud Run Docker image to Container Registry"
	@echo "\n\033[0;34m--- Start ---\033[0m"
	@echo "\033[0;35mstart.lighthouse\033[0m\tStarts the Lighthouse Server Cloud Run Docker image locally"
	@echo "\033[0;35mstart.phpcs\033[0m\t\tStarts the PHPCS Server Cloud Run Docker image locally"
	@echo "\033[0;35mstart.sync\033[0m\t\tStarts the Sync Server Cloud Run Docker image locally"
	@echo "\n\033[0;34m--- Deploy ---\033[0m"
	@echo "\033[0;35mdeploy.api\033[0m\t\tDeploys the API Server to Google Cloud Functions"
	@echo "\033[0;35mdeploy.spec\033[0m\t\tDeploys the OpenAPI Specification Server to Google Cloud Functions"
	@echo "\033[0;35mdeploy.firebase\033[0m\t\tDeploys the VuePress documentation site to Firebase hosting"
	@echo "\033[0;35mdeploy.firebase\033[0m\t\tDeploys the Firestore configuration files (rules, indexes) to Firebase"
	@echo "\033[0;35mdeploy.firebase\033[0m\t\tDeploys the Firestore configuration files (rules, indexes) to Firebase"
	@echo "\033[0;35mdeploy.lighthouse\033[0m\tDeploys the Lighthouse Server to Google Cloud Run"
	@echo "\033[0;35mdeploy.phpcs\033[0m\t\tDeploys the PHPCS Server to Google Cloud Run"
	@echo "\033[0;35mdeploy.sync\033[0m\t\tDeploys the Sync Server to Google Cloud Run"
	@echo "\033[0;35mdeploy.iam\033[0m\t\tBinds the Google Cloud IAM service account to the Cloud Run servers"
	@echo "\033[0;35mdeploy.topics\033[0m\t\tDeploys the topics to Google Cloud Pub/Sub"
	@echo "\033[0;35mdeploy.pubsub\033[0m\t\tSubscribes to the topics in Google Cloud Pub/Sub"
	@echo "\033[0;35mdeploy.scheduler\033[0m\tDeploys the cron schedule used by the Sync Server to Google Cloud Scheduler"
	@echo "\n\033[0;34m--- Describe ---\033[0m"
	@echo "\033[0;35mdescribe.lighthouse\033[0m\tObtains the Google Cloud Run endpoint URL for the Lighthouse Server"
	@echo "\033[0;35mdescribe.phpcs\033[0m\t\tObtains the Google Cloud Run endpoint URL for the PHPCS Server"
	@echo "\033[0;35mdescribe.sync\033[0m\t\tObtains the Google Cloud Run endpoint URL for the Sync Server"
	@echo "\n\033[0;34m--- Delete ---\033[0m"
	@echo "\033[0;35mdelete.files\033[0m\t\tDeletes all files and directories recursively and multi-threaded in the Cloud Storage bucket"
	@echo "\033[0;35mdelete.firestore\033[0m\tDeletes all data from the Firestore database"
	@echo "\033[0;35mdelete.scheduler\033[0m\tDeletes the cron schedule for the Sync Server from Google Cloud Scheduler"
	@echo "\n\033[0;34m--- Download ---\033[0m"
	@echo "\033[0;35mdownload.keys\033[0m\t\tDownloads a very permissive \033[0;37mservice-account.json\033[0m for local development (do not use with GitHub Actions)"
	@echo "\n"

setup:
	@gcloud config set project ${GOOGLE_CLOUD_PROJECT}
	@gcloud config set gcloudignore/enabled true
	@gcloud config set functions/region us-central1
	@gcloud config set run/region us-central1
	@gcloud config set run/platform managed

setup.cloud: setup
	@gcloud components update
	@gcloud auth login
	@gcloud auth configure-docker
	@gcloud services enable appengine.googleapis.com
	@gcloud services enable cloudscheduler.googleapis.com
	@gcloud services enable cloudfunctions.googleapis.com
	@gcloud services enable cloudbuild.googleapis.com
	@gcloud services enable containerregistry.googleapis.com
	@gcloud services enable run.googleapis.com

setup.bucket: setup
	@gsutil mb -c STANDARD -l US -b on gs://${GOOGLE_CLOUD_PROJECT}-reports

setup.firestore: setup
	@gcloud app create --region=us-central
	@gcloud firestore databases create --region=us-central

setup.iam: setup
	@gcloud iam service-accounts create tide-run-server --display-name "Tide Cloud Run Server"

build.lighthouse:
	@docker build --no-cache -t gcr.io/${GOOGLE_CLOUD_PROJECT}/lighthouse:${VERSION} -f ./app/docker/Dockerfile.lighthouse ./app

build.phpcs:
	@docker build --no-cache -t gcr.io/${GOOGLE_CLOUD_PROJECT}/phpcs:${VERSION} -f ./app/docker/Dockerfile.phpcs ./app

build.sync:
	@docker build --no-cache -t gcr.io/${GOOGLE_CLOUD_PROJECT}/sync:${VERSION} -f ./app/docker/Dockerfile.sync ./app

push.lighthouse:
	@docker push gcr.io/${GOOGLE_CLOUD_PROJECT}/lighthouse:${VERSION}

push.phpcs:
	@docker push gcr.io/${GOOGLE_CLOUD_PROJECT}/phpcs:${VERSION}

push.sync:
	@docker push gcr.io/${GOOGLE_CLOUD_PROJECT}/sync:${VERSION}

start.lighthouse:
	@docker run -v $(PWD)/app/src:/app/src -v $(PWD)/app/data:/app/data -v $(PWD)/app/service-account.json:/app/service-account.json --rm -p 5010:8080 --env-file .env.server gcr.io/${GOOGLE_CLOUD_PROJECT}/lighthouse:${VERSION}

start.phpcs:
	@docker run -v $(PWD)/app/src:/app/src -v $(PWD)/app/data:/app/data -v $(PWD)/app/service-account.json:/app/service-account.json --rm -p 5011:8080 --env-file .env.server gcr.io/${GOOGLE_CLOUD_PROJECT}/phpcs:${VERSION}

start.sync:
	@docker run -v $(PWD)/app/src:/app/src --rm -p 5012:8080 --env-file .env.server gcr.io/${GOOGLE_CLOUD_PROJECT}/sync:${VERSION}

deploy.api: setup
	@gcloud functions deploy api --source app --allow-unauthenticated --runtime nodejs16 --trigger-http --set-env-vars "NODE_ENV=production,GOOGLE_CLOUD_STORAGE_BUCKET_NAME=${GOOGLE_CLOUD_STORAGE_BUCKET_NAME}"

deploy.spec: setup
	@gcloud functions deploy spec --source app --allow-unauthenticated --runtime nodejs16 --trigger-http --set-env-vars "NODE_ENV=production,GOOGLE_CLOUD_STORAGE_BUCKET_NAME=${GOOGLE_CLOUD_STORAGE_BUCKET_NAME}"

deploy.firebase:
	@firebase --project=${GOOGLE_CLOUD_PROJECT} deploy --only hosting

deploy.firestore:
	@firebase --project=${GOOGLE_CLOUD_PROJECT} deploy --only firestore

deploy.lighthouse: setup
	@gcloud run deploy lighthouse-server --no-allow-unauthenticated --image gcr.io/${GOOGLE_CLOUD_PROJECT}/lighthouse:${VERSION} --memory ${GOOGLE_CLOUD_RUN_LIGHTHOUSE_MEMORY} --timeout 10m --concurrency 1 --set-env-vars "NODE_ENV=production,GOOGLE_CLOUD_STORAGE_BUCKET_NAME=${GOOGLE_CLOUD_STORAGE_BUCKET_NAME}"

deploy.phpcs: setup
	@gcloud run deploy phpcs-server --no-allow-unauthenticated --image gcr.io/${GOOGLE_CLOUD_PROJECT}/phpcs:${VERSION} --memory ${GOOGLE_CLOUD_RUN_PHPCS_MEMORY} --timeout 10m --concurrency 1 --set-env-vars "NODE_ENV=production,GOOGLE_CLOUD_STORAGE_BUCKET_NAME=${GOOGLE_CLOUD_STORAGE_BUCKET_NAME}"

deploy.sync: setup
	@gcloud run deploy sync-server --no-allow-unauthenticated --image gcr.io/${GOOGLE_CLOUD_PROJECT}/sync:${VERSION} --memory ${GOOGLE_CLOUD_RUN_SYNC_MEMORY} --timeout 10m --concurrency 1 --set-env-vars "NODE_ENV=production" --max-instances 1

deploy.iam: setup
	@gcloud run services add-iam-policy-binding lighthouse-server \
		--member=serviceAccount:tide-run-server@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com \
		--role=roles/run.invoker
	@gcloud run services add-iam-policy-binding phpcs-server \
		--member=serviceAccount:tide-run-server@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com \
		--role=roles/run.invoker
	@gcloud run services add-iam-policy-binding sync-server \
		--member=serviceAccount:tide-run-server@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com \
		--role=roles/run.invoker
	@gcloud projects add-iam-policy-binding ${GOOGLE_CLOUD_PROJECT} \
		--member=serviceAccount:service-${GOOGLE_CLOUD_PROJECT_NUMBER}@gcp-sa-pubsub.iam.gserviceaccount.com \
		--role=roles/iam.serviceAccountTokenCreator

deploy.topics: setup
	@gcloud pubsub topics create MESSAGE_TYPE_LIGHTHOUSE_REQUEST
	@gcloud pubsub topics create MESSAGE_TYPE_LIGHTHOUSE_REQUEST_DEAD_LETTER
	@gcloud pubsub topics add-iam-policy-binding MESSAGE_TYPE_LIGHTHOUSE_REQUEST_DEAD_LETTER \
		--member='serviceAccount:service-${GOOGLE_CLOUD_PROJECT_NUMBER}@gcp-sa-pubsub.iam.gserviceaccount.com' \
		--role='roles/pubsub.publisher'
	@gcloud pubsub topics create MESSAGE_TYPE_PHPCS_REQUEST
	@gcloud pubsub topics create MESSAGE_TYPE_PHPCS_REQUEST_DEAD_LETTER
	@gcloud pubsub topics add-iam-policy-binding MESSAGE_TYPE_PHPCS_REQUEST_DEAD_LETTER \
		--member='serviceAccount:service-${GOOGLE_CLOUD_PROJECT_NUMBER}@gcp-sa-pubsub.iam.gserviceaccount.com' \
		--role='roles/pubsub.publisher'
	@gcloud pubsub topics create MESSAGE_TYPE_SYNC_REQUEST
	@gcloud pubsub topics create MESSAGE_TYPE_SYNC_REQUEST_DEAD_LETTER
	@gcloud pubsub topics add-iam-policy-binding MESSAGE_TYPE_SYNC_REQUEST_DEAD_LETTER \
		--member='serviceAccount:service-${GOOGLE_CLOUD_PROJECT_NUMBER}@gcp-sa-pubsub.iam.gserviceaccount.com' \
		--role='roles/pubsub.publisher'

deploy.pubsub: setup.iam deploy.iam deploy.topics
	@gcloud pubsub subscriptions create lighthouse-server-dead-letter --topic MESSAGE_TYPE_LIGHTHOUSE_REQUEST_DEAD_LETTER
	@gcloud pubsub subscriptions create lighthouse-server --topic MESSAGE_TYPE_LIGHTHOUSE_REQUEST \
		--push-endpoint=${GOOGLE_CLOUD_RUN_LIGHTHOUSE} \
		--ack-deadline 180 \
		--enable-message-ordering \
		--push-auth-service-account=tide-run-server@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com \
		--max-delivery-attempts 5 \
		--dead-letter-topic MESSAGE_TYPE_LIGHTHOUSE_REQUEST_DEAD_LETTER \
		--max-retry-delay 10 \
		--min-retry-delay 1
	@gcloud pubsub subscriptions add-iam-policy-binding lighthouse-server \
    	--member=serviceAccount:service-${GOOGLE_CLOUD_PROJECT_NUMBER}@gcp-sa-pubsub.iam.gserviceaccount.com \
    	--role=roles/pubsub.subscriber
	@gcloud pubsub subscriptions create phpcs-server-dead-letter --topic MESSAGE_TYPE_PHPCS_REQUEST_DEAD_LETTER
	@gcloud pubsub subscriptions create phpcs-server --topic MESSAGE_TYPE_PHPCS_REQUEST \
		--push-endpoint=${GOOGLE_CLOUD_RUN_PHPCS} \
		--ack-deadline 180 \
		--enable-message-ordering \
		--push-auth-service-account=tide-run-server@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com \
		--max-delivery-attempts 5 \
		--dead-letter-topic MESSAGE_TYPE_PHPCS_REQUEST_DEAD_LETTER \
		--max-retry-delay 10 \
		--min-retry-delay 1
	@gcloud pubsub subscriptions add-iam-policy-binding phpcs-server \
    	--member=serviceAccount:service-${GOOGLE_CLOUD_PROJECT_NUMBER}@gcp-sa-pubsub.iam.gserviceaccount.com \
    	--role=roles/pubsub.subscriber
	@gcloud pubsub subscriptions create sync-server-dead-letter --topic MESSAGE_TYPE_SYNC_REQUEST_DEAD_LETTER
	@gcloud pubsub subscriptions create sync-server --topic MESSAGE_TYPE_SYNC_REQUEST \
		--push-endpoint=${GOOGLE_CLOUD_RUN_SYNC} \
		--ack-deadline 180 \
		--push-auth-service-account=tide-run-server@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com \
		--max-delivery-attempts 5 \
		--dead-letter-topic MESSAGE_TYPE_SYNC_REQUEST_DEAD_LETTER \
		--max-retry-delay 10 \
		--min-retry-delay 1
	@gcloud pubsub subscriptions add-iam-policy-binding sync-server \
		--member=serviceAccount:service-${GOOGLE_CLOUD_PROJECT_NUMBER}@gcp-sa-pubsub.iam.gserviceaccount.com \
		--role=roles/pubsub.subscriber

deploy.scheduler: setup
	@gcloud scheduler jobs create pubsub sync-server --schedule "*/5 * * * *" --topic MESSAGE_TYPE_SYNC_REQUEST --message-body "Start Sync/Ingest" --max-retry-attempts 0

describe.lighthouse: setup
	@gcloud run services describe lighthouse-server --format 'value(status.url)'

describe.phpcs: setup
	@gcloud run services describe phpcs-server --format 'value(status.url)'

describe.sync: setup
	@gcloud run services describe sync-server --format 'value(status.url)'

delete.files:
	@gsutil -m rm -r gs://${GOOGLE_CLOUD_STORAGE_BUCKET_NAME}/**

delete.firestore:
	@firebase --project=${GOOGLE_CLOUD_PROJECT} firestore:delete --force --all-collections

delete.scheduler:
	@gcloud scheduler jobs delete sync-server

download.keys: setup
	@gcloud iam service-accounts create local-server --display-name "Local Development Server"
	@gcloud projects add-iam-policy-binding ${GOOGLE_CLOUD_PROJECT} \
		--member="serviceAccount:local-server@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com" \
		--role=roles/owner
	@gcloud iam service-accounts keys create app/service-account.json \
		--iam-account=local-server@${GOOGLE_CLOUD_PROJECT}.iam.gserviceaccount.com