name: Deploy info-canicule

on:
  push:
    branches: [main]

jobs:
  deploy:
    runs-on: docker
    container:
      image: alpine:3.20
    steps:
      - name: Install tooling
        run: apk add --no-cache openssh-client git rsync

      - name: Configure SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          echo "${{ secrets.VPS_KNOWN_HOSTS }}" > ~/.ssh/known_hosts
          chmod 644 ~/.ssh/known_hosts

      - name: Deploy on VPS
        run: |
          ssh deploy@vps.nocleus.com bash -se <<'EOSSH'
            set -euo pipefail
            cd /opt/projects/info-canicule
            git fetch --prune origin main
            git reset --hard origin/main
            make env
            docker compose up -d --build --wait
            docker image prune -f
          EOSSH