Add CI and deploy workflows for Gitea Actions

CI runs ruff and eslint/tsc on push to develop and PRs. Deploy
workflow is manual (workflow_dispatch) and builds, pushes, and
deploys images to Unraid via SSH.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.github/workflows/ci.yml

@@ -0,0 +1,38 @@
+name: CI
+
+on:
+  push:
+    branches: [develop]
+  pull_request:
+    branches: [develop]
+
+jobs:
+  backend-lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: pip install ruff
+      - name: Check linting
+        run: ruff check backend/
+      - name: Check formatting
+        run: ruff format --check backend/
+
+  frontend-lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "24"
+      - name: Install dependencies
+        run: npm ci
+        working-directory: frontend
+      - name: Lint
+        run: npm run lint
+        working-directory: frontend
+      - name: Type check
+        run: npx tsc -b
+        working-directory: frontend

.github/workflows/deploy.yml

@@ -0,0 +1,42 @@
+name: Deploy
+
+on:
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main'
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Login to Gitea registry
+        run: echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login gitea.nerdboden.de -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
+
+      - name: Build and push API image
+        run: |
+          docker build --platform linux/amd64 \
+            -t gitea.nerdboden.de/thefurya/nuzlocke-tracker-api:latest \
+            -f backend/Dockerfile.prod ./backend
+          docker push gitea.nerdboden.de/thefurya/nuzlocke-tracker-api:latest
+
+      - name: Build and push frontend image
+        run: |
+          docker build --platform linux/amd64 \
+            -t gitea.nerdboden.de/thefurya/nuzlocke-tracker-frontend:latest \
+            -f frontend/Dockerfile.prod ./frontend
+          docker push gitea.nerdboden.de/thefurya/nuzlocke-tracker-frontend:latest
+
+      - name: Deploy to Unraid
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/deploy_key
+          chmod 600 ~/.ssh/deploy_key
+          SSH_CMD="ssh -o StrictHostKeyChecking=no -i ~/.ssh/deploy_key root@192.168.1.10"
+          SCP_CMD="scp -o StrictHostKeyChecking=no -i ~/.ssh/deploy_key"
+          DEPLOY_DIR="/mnt/user/appdata/nuzlocke-tracker"
+
+          $SCP_CMD docker-compose.prod.yml "root@192.168.1.10:${DEPLOY_DIR}/docker-compose.yml"
+          $SCP_CMD backup.sh "root@192.168.1.10:${DEPLOY_DIR}/backup.sh"
+          $SSH_CMD "chmod +x '${DEPLOY_DIR}/backup.sh'"
+          $SSH_CMD "cd '${DEPLOY_DIR}' && docker compose pull && docker compose up -d"