name: Deploy to VPS

on:
  push:
    branches:
      - master
  workflow_dispatch:

permissions:
  contents: read
  packages: write

env:
  REGISTRY: ghcr.io
  OWNER: mytheclipse


jobs:
  build-and-push:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        service: [frontend, backend, discord-gateway, proxy]
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          submodules: recursive

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to GHCR
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Build and push ${{ matrix.service }}
        uses: docker/build-push-action@v6
        with:
          context: .
          file: infra/docker/Dockerfile.${{ matrix.service }}
          push: true
          tags: |
            ${{ env.REGISTRY }}/${{ env.OWNER }}/bete-${{ matrix.service }}:latest
            ${{ env.REGISTRY }}/${{ env.OWNER }}/bete-${{ matrix.service }}:${{ github.sha }}
          cache-from: type=gha
          cache-to: type=gha,mode=max
          build-args: |
            VITE_BE_API_URL=https://imphnen.asepharyana.my.id
            VITE_BE_WS_URL=wss://imphnen.asepharyana.my.id

  deploy:
    needs: build-and-push
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: SCP deploy files to VPS
        uses: appleboy/scp-action@v0.1.7
        with:
          host: ${{ secrets.VPS_HOST }}
          username: ${{ secrets.VPS_USERNAME }}
          key: ${{ secrets.VPS_SSH_KEY }}
          source: "infra/docker/*"
          target: "/tmp/bete-deploy"
          strip_components: 2

      - name: Deploy to VPS
        uses: appleboy/ssh-action@v1.2.5
        env:
          GHCR_USERNAME: ${{ github.actor }}
          GHCR_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          ENV_FILE: ${{ secrets.ENV_FILE }}
        with:
          host: ${{ secrets.VPS_HOST }}
          username: ${{ secrets.VPS_USERNAME }}
          key: ${{ secrets.VPS_SSH_KEY }}
          envs: GHCR_USERNAME,GHCR_TOKEN,ENV_FILE
          script: |
            set -eu

            APP_DIR=/opt/imphenbot
            mkdir -p "$APP_DIR" "$APP_DIR/nginx"
            cd "$APP_DIR"

            printf '%s\n' "$ENV_FILE" > .env

            # Copy deploy files from SCP staging dir
            cp /tmp/bete-deploy/docker-compose.yml "$APP_DIR/docker-compose.yml"
            cp /tmp/bete-deploy/nginx.conf "$APP_DIR/nginx/nginx.conf"

            mkdir -p recordings

            echo "$GHCR_TOKEN" | docker login ghcr.io -u "$GHCR_USERNAME" --password-stdin

            docker compose pull
            docker compose down --remove-orphans || true
            docker compose up -d --remove-orphans
            docker image prune -f