name: Deploy

on:
  push:
    branches:
      - main

jobs:
  deploy:
    runs-on: [ovh-vps-1, deploy, hiddenden]
    steps:
      - name: Pull latest code
        working-directory: /home/ubuntu/appdata/Cozy-Den
        run: |
          git fetch origin
          git reset --hard origin/main

      - name: Login to Gitea registry
        run: echo "${{ secrets.GITEA_TOKEN }}" | docker login git.hiddenden.cafe -u ${{ secrets.GITEA_USERNAME }} --password-stdin

      - name: Build & push image
        working-directory: /home/ubuntu/appdata/Cozy-Den
        run: |
          docker build -t git.hiddenden.cafe/hiddenden/cozy-den:latest .
          docker push git.hiddenden.cafe/hiddenden/cozy-den:latest

      - name: Deploy
        working-directory: /home/ubuntu/appdata/Cozy-Den
        env:
          SECRET_KEY: ${{ secrets.SECRET_KEY }}
          ADMIN_SECRET_TOKEN: ${{ secrets.ADMIN_SECRET_TOKEN }}
          COOKIE_SECURE: "true"
        run: docker compose up -d