name: Build and Deploy

# Required secrets
#   DEPLOY_SSH_KEY  - private key for the deploy user
#   DEPLOY_HOST     - production host, e.g. YOUR_PROD_HOST
#   DEPLOY_USER     - ssh user, e.g. deploy
#   DEPLOY_PATH     - destination dir, e.g. /var/www/dttmr-fe

on:
  push:
    branches:
      - main

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest
    container:
      image: node:24-bookworm
    steps:
      - name: Install system dependencies
        run: apt-get update && apt-get install -y --no-install-recommends git openssh-client rsync ca-certificates

      - name: Checkout
        uses: actions/checkout@v4

      - name: Install dependencies
        run: npm ci

      - name: Build
        run: npm run build

      - name: Configure SSH
        env:
          DEPLOY_SSH_KEY: ${{ secrets.DEPLOY_SSH_KEY }}
          DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
        run: |
          mkdir -p ~/.ssh
          printf '%s\n' "$DEPLOY_SSH_KEY" > ~/.ssh/deploy_key
          chmod 600 ~/.ssh/deploy_key
          ssh-keyscan -H "$DEPLOY_HOST" >> ~/.ssh/known_hosts

      - name: Deploy via rsync
        env:
          DEPLOY_USER: ${{ secrets.DEPLOY_USER }}
          DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
          DEPLOY_PATH: ${{ secrets.DEPLOY_PATH }}
        run: |
          rsync -avz --delete \
            -e "ssh -i ~/.ssh/deploy_key -o UserKnownHostsFile=~/.ssh/known_hosts" \
            dist/ "$DEPLOY_USER@$DEPLOY_HOST:$DEPLOY_PATH"

  sync-dev:
    needs: build-and-deploy
    runs-on: ubuntu-latest
    container:
      image: node:24-bookworm
    permissions:
      contents: write
    steps:
      - name: Install system dependencies
        run: apt-get update && apt-get install -y --no-install-recommends git

      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Fast-forward dev to main
        run: |
          git fetch origin dev:dev
          git checkout dev
          git merge --ff-only origin/main
          git push origin dev