deploy-server-image.yml

---
name: Deploy server image

on:
  workflow_dispatch:
    inputs:
      env:
        description: "Deployment environment"
        required: true
        default: "staging"

jobs:
  validate:
    runs-on: ubuntu-latest
    outputs:
      env: ${{ steps.setenv.outputs.env }}
    steps:
      - name: Validate environment
        id: setenv
        run: |
          if [[ "${{ github.event.inputs.env }}" != "prod" && "${{ github.event.inputs.env }}" != "staging" ]]; then
            echo "Error: Invalid environment specified. Can only be 'prod' or 'staging'."
            exit 1
          fi

  deploy_to_server:
    needs: validate
    runs-on: ubuntu-latest
    environment: ${{ github.event.inputs.env }}
    steps:
      - name: Setup SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/private_key.pem
          chmod 600 ~/.ssh/private_key.pem
          ssh-keyscan -H ${{ secrets.SERVER_HOST }} >> ~/.ssh/known_hosts

      - name: Checkout code
        uses: actions/checkout@v4

      - name: Copy docker compose files
        run: |
          scp -i ~/.ssh/private_key.pem -r ./docker/* ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}:/home/${{ secrets.SERVER_USER }}/track/
          echo "creating alias script"
          ssh -i ~/.ssh/private_key.pem ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }} <<"ENDSSH"
            echo "dc() {" > track/alias
            echo "    APP_ENV=${{ vars.APP_ENV }} HOST_PORT=${{ vars.HOST_PORT }} POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }} docker compose -f track/base.yml -f track/prod.yml \"\$@\"" >> track/alias
            echo "}" >> track/alias
            chmod +x track/alias
          ENDSSH
          echo "created alias script"

      # - id: "auth"
      #   uses: "google-github-actions/auth@v1"
      #   with:
      #     credentials_json: "${{ secrets.GCP_SA_KEY }}"

      # - name: "Set up Cloud SDK"
      #   uses: "google-github-actions/setup-gcloud@v1"

      # - name: Configure Docker to use Google Artifact Registry
      #   run: gcloud auth configure-docker us-central1-docker.pkg.dev

      - name: Prepare and Deploy
        run: |

          cat <<EOM >/tmp/gcp-sa-key.json
            ${{ secrets.GCP_SA_KEY }}
          EOM

          scp -i ~/.ssh/private_key.pem /tmp/gcp-sa-key.json ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}:/tmp/gcp-sa-key.json

          ssh -i ~/.ssh/private_key.pem ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }} <<"ENDSSH"
            gcloud auth activate-service-account --key-file=/tmp/gcp-sa-key.json
            gcloud auth configure-docker us-central1-docker.pkg.dev
            rm /tmp/gcp-sa-key.json

            export APP_ENV=${{ vars.APP_ENV }}
            export HOST_PORT=${{ vars.HOST_PORT }}
            export POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }}
            docker compose -f track/base.yml -f track/prod.yml pull
            docker compose -f track/base.yml -f track/prod.yml down
            docker compose -f track/base.yml -f track/prod.yml up -d

            echo "Status:"
            docker compose -f track/base.yml -f track/prod.yml ps
          ENDSSH