feat: add GitHub Actions deployment pipeline to dev server

Build Docker image, push to Docker Hub (hendisantika/jvmid-bot), and
deploy to dev server (103.31.204.189) via SSH on every push to main.
Reuses existing lint & test checks as a prerequisite before deploying.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: hendisantika

.github/workflows/deploy-dev.yml

@@ -0,0 +1,67 @@
+name: Deploy to Dev Server
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  checks:
+    uses: ./.github/workflows/python-checks.yml
+
+  build-and-push:
+    needs: checks
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: |
+            hendisantika/jvmid-bot:latest
+            hendisantika/jvmid-bot:${{ github.sha }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+  deploy:
+    needs: build-and-push
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up SSH key
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.DEV_SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+          echo "${{ secrets.DEV_SSH_KNOWN_HOSTS }}" > ~/.ssh/known_hosts
+          chmod 644 ~/.ssh/known_hosts
+
+      - name: Copy docker-compose.prod.yml to server
+        run: |
+          scp docker-compose.prod.yml deployer@103.31.204.189:~/jvmid-bot/docker-compose.prod.yml
+
+      - name: Deploy on server
+        run: |
+          ssh deployer@103.31.204.189 << 'EOF'
+            cd ~/jvmid-bot
+            docker compose -f docker-compose.prod.yml pull
+            docker compose -f docker-compose.prod.yml up -d
+            docker image prune -f
+            echo "Deployment complete. Running containers:"
+            docker ps --filter "name=jvmid-bot"
+          EOF

.github/workflows/python-checks.yml

@@ -5,6 +5,7 @@ on:
     branches: [ "main" ]
   pull_request:
     branches: [ "main" ]
+  workflow_call:
 
 jobs:
   lint:

docker-compose.prod.yml

@@ -0,0 +1,18 @@
+version: '3.8'
+
+services:
+  bot:
+    image: hendisantika/jvmid-bot:latest
+    container_name: jvmid-bot
+    env_file: .env
+    volumes:
+      - ./data:/app/data
+    restart: unless-stopped
+    deploy:
+      resources:
+        limits:
+          cpus: '1'
+          memory: 512M
+        reservations:
+          cpus: '0.5'
+          memory: 256M