feat(infrastructure): add frontend, deploy to cloudflare

feat(infrastructure): add frontend, deploy to cloudflare

.github/workflows/deploy-pr.yaml

@@ -114,7 +114,7 @@ jobs:
   uninstall:
     if: github.event.action == 'closed'
     name: Helm uninstall (PR preview)
-    runs-on: ubuntu-latest
+    runs-on: vhs
     steps:
       - name: Setup Helm
         uses: azure/setup-helm@v4

.github/workflows/deploy-prod.yaml

@@ -5,9 +5,11 @@ on:
     branches: [ "main" ]
     paths:
       - 7project/backend/**
+      - 7project/frontend/**
       - 7project/charts/myapp-chart/**
       - .github/workflows/deploy-prod.yaml
       - .github/workflows/build-image.yaml
+      - .github/workflows/frontend-pages.yml
   workflow_dispatch:
 
 
@@ -38,7 +40,7 @@ jobs:
   deploy:
     name: Helm upgrade/install (prod)
     runs-on: vhs
-    needs: [build]
+    needs: [build, frontend]
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/frontend-pages.yml

@@ -60,21 +60,37 @@ jobs:
           EVENT_NAME: ${{ github.event_name }}
           PR_NUMBER: ${{ github.event.pull_request.number || inputs.pr_number }}
           PR_TEMPLATE: ${{ vars.BACKEND_URL_PR_TEMPLATE }}
-          PROD_DOMAIN: ${{ vars.PROD_DOMAIN }}
+          PROD_DOMAIN_VAR: ${{ vars.PROD_DOMAIN }}
+          PROD_DOMAIN_SECRET: ${{ secrets.PROD_DOMAIN }}
+          BACKEND_URL_OVERRIDE: ${{ vars.BACKEND_URL || secrets.BACKEND_URL }}
           MODE: ${{ inputs.mode }}
         run: |
           set -euo pipefail
           URL=""
-          if [ -n "${PROD_DOMAIN:-}" ]; then
+          # 1) Explicit override wins (from repo var or secret)
-            if echo "$PROD_DOMAIN" | grep -Eiq '^https?://'; then
+          if [ -n "${BACKEND_URL_OVERRIDE:-}" ]; then
-              URL="$PROD_DOMAIN"
+            if echo "$BACKEND_URL_OVERRIDE" | grep -Eiq '^https?://'; then
+              URL="$BACKEND_URL_OVERRIDE"
             else
-              URL="https://${PROD_DOMAIN}"
+              URL="https://${BACKEND_URL_OVERRIDE}"
             fi
-          fi
+          else
-          if [ "${MODE:-}" = "pr" ] || [ "${EVENT_NAME}" = "pull_request" ]; then
+            # 2) PR template when building for PR
-            if [ -n "${PR_TEMPLATE:-}" ] && [ -n "${PR_NUMBER:-}" ] ; then
+            if [ "${MODE:-}" = "pr" ] || [ "${EVENT_NAME}" = "pull_request" ]; then
-              URL="${PR_TEMPLATE//\{PR\}/${PR_NUMBER}}"
+              if [ -n "${PR_TEMPLATE:-}" ] && [ -n "${PR_NUMBER:-}" ] ; then
+                URL="${PR_TEMPLATE//\{PR\}/${PR_NUMBER}}"
+              fi
+            fi
+            # 3) Fallback to PROD_DOMAIN (prefer repo var, then secret)
+            if [ -z "$URL" ]; then
+              PROD_DOMAIN="${PROD_DOMAIN_VAR:-${PROD_DOMAIN_SECRET:-}}"
+              if [ -n "$PROD_DOMAIN" ]; then
+                if echo "$PROD_DOMAIN" | grep -Eiq '^https?://'; then
+                  URL="$PROD_DOMAIN"
+                else
+                  URL="https://${PROD_DOMAIN}"
+                fi
+              fi
             fi
           fi
           echo "Using backend URL: ${URL:-<empty>}"