name: Deploy Backend and Backoffice Dev

on:
  workflow_dispatch:
  push:
    branches:
      - dev

jobs:
  build-and-push:
    runs-on: docker-ready 
    env:
      DOCKER_API_VERSION: "1.43"
    defaults:
      run:
        shell: sh
    steps:
      - name: Install Dependencies
        run: apk add --no-cache git docker-cli docker-cli-buildx nodejs

      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 1 

      - name: Set up Docker Buildx
        run: |
          docker buildx create --use --driver docker-container --name local-builder || docker buildx use local-builder
          docker buildx inspect --bootstrap

      - name: Login to Forgejo Registry
        uses: docker/login-action@v3
        with:
          registry: pipe.gohorsejobs.com
          username: bohessefm
          password: ${{ secrets.FORGEJO_TOKEN }}

      - name: Build and Push Backend
        uses: docker/build-push-action@v5
        with:
          context: ./backend
          file: ./backend/Dockerfile
          push: true
          provenance: false
          tags: |
            pipe.gohorsejobs.com/bohessefm/gohorsejobs:latest
            pipe.gohorsejobs.com/bohessefm/gohorsejobs:${{ github.sha }}

      - name: Build and Push Backoffice
        uses: docker/build-push-action@v5
        with:
          context: ./backoffice
          file: ./backoffice/Dockerfile
          push: true
          provenance: false
          tags: |
            pipe.gohorsejobs.com/bohessefm/backoffice:latest
            pipe.gohorsejobs.com/bohessefm/backoffice:${{ github.sha }}

  deploy-to-k3s:
    needs: build-and-push
    runs-on: docker-ready
    defaults:
      run:
        shell: sh
    steps:
      - name: Install Tools (Git & Kubectl)
        run: |
          apk add --no-cache git curl
          curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
          chmod +x kubectl
          mv kubectl /usr/local/bin/

      - name: Checkout code
        uses: actions/checkout@v4

      - name: Deploy to K3s
        run: |
          # 1. CRIA O ARQUIVO DE CONFIGURAÇÃO
          echo "${{ secrets.KUBECONFIG }}" > /tmp/kubeconfig
          chmod 600 /tmp/kubeconfig
          
          # Criamos um alias local para facilitar a escrita e garantir o arquivo
          alias k="kubectl --kubeconfig=/tmp/kubeconfig"

          # 2. TESTA A CONEXÃO FORÇADA
          echo "Testando conexão com o cluster..."
          k cluster-info || { echo "Falha ao conectar no cluster! Verifique seu KUBECONFIG secret."; exit 1; }

          # 3. ATUALIZA OS SEGREDO
          k -n gohorsejobsdev delete secret backend-secrets --ignore-not-found
          k -n gohorsejobsdev create secret generic backend-secrets \
            --from-literal=DATABASE_URL="${{ vars.DATABASE_URL }}" \
            --from-literal=JWT_SECRET="${{ vars.JWT_SECRET }}" \
            --from-literal=MTU="${{ vars.MTU }}"

          # 4. APLICA E RESTARTA
          k apply -f k8s/dev/ -n gohorsejobsdev
          k -n gohorsejobsdev rollout restart deployment gohorse-backend-dev
          k -n gohorsejobsdev rollout restart deployment gohorse-backoffice-dev
          
          # 5. STATUS FINAL
          k -n gohorsejobsdev rollout status deployment gohorse-backend-dev