name: baekjoon-bot-cicd

on:
  push:
    branches: ["main"]

jobs:
  build_push_deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Manual checkout (supports /gitea subpath)
        env:
          ACTOR: ${{ github.actor }}
          REPO: ${{ github.repository }}   # owner/repo
          SHA: ${{ github.sha }}
          TOKEN: ${{ secrets.NKEY_PAT }}  # repo read 권한 있는 PAT
        run: |
          set -euo pipefail
          git init .
          git remote add origin "https://${ACTOR}:${TOKEN}@nkeystudy.site/gitea/${REPO}.git"
          git fetch --no-tags --prune --depth=1 origin "${SHA}"
          git checkout -q FETCH_HEAD

      - name: Docker login
        run: |
          echo "${{ secrets.DOCKERHUB_TOKEN }}" | docker login -u "${{ secrets.DOCKERHUB_USERNAME }}" --password-stdin

      - name: Build
        run: |
          docker build -t nkey01/baekjoon-bot:latest .

      - name: Push
        run: |
          docker push nkey01/baekjoon-bot:latest

      - name: Deploy on server (compose pull/up)
        run: |
          docker compose -f /nkeysworld/compose.yml pull baekjoon-bot
          docker compose -f /nkeysworld/compose.yml up -d baekjoon-bot
          docker image prune -f