name: tlsync-ci-deploy

on:
  push:
    branches: [master]
  workflow_dispatch:

jobs:
  build-deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Build TLSync image
        run: docker build -t cc-tlsync-ci:${{ github.sha }} .

      - name: Configure SSH
        run: |
          mkdir -p ~/.ssh
          printf '%s\n' "${{ secrets.DEPLOY_SSH_PRIVATE_KEY }}" > ~/.ssh/deploy_key
          chmod 600 ~/.ssh/deploy_key
          printf '%s\n' "${{ secrets.DEPLOY_KNOWN_HOSTS }}" > ~/.ssh/known_hosts

      - name: Deploy TLSync
        run: |
          ssh -i ~/.ssh/deploy_key "${{ secrets.DEPLOY_USER }}@${{ secrets.TLSYNC_DEPLOY_HOST }}" '
            set -euo pipefail
            cd /home/kcar/tlsync
            git fetch origin master
            git reset --hard origin/master
            docker compose -p tlsync -f docker-compose.yml up -d --build
            docker compose -p tlsync -f docker-compose.yml ps
          '