name: Deploy Backend and Backoffice Dev

on:
  workflow_dispatch:
  push:
    branches: [dev]

env:
  REGISTRY: pipe.gohorsejobs.com
  IMAGE_NAMESPACE: bohessefm
  DOCKER_HOST: unix:///run/docker.sock
  DOCKER_BUILDKIT: 0

jobs:
  build-and-push:
    runs-on: [self-hosted, linux-amd64]
    defaults:
      run:
        shell: sh

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Docker Login
        run: |
          echo "${{ secrets.FORGEJO_TOKEN }}" | docker login ${{ env.REGISTRY }} \
            -u ${{ env.IMAGE_NAMESPACE }} --password-stdin

      - name: Build & Push Backend
        run: |
          docker build -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }} \
            -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:latest ./backend
          
          docker push --quiet ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }}
          docker push --quiet ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:latest

      - name: Build & Push Backoffice
        run: |
          docker build -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }} \
            -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:latest ./backoffice
          
          docker push --quiet ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }}
          docker push --quiet ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:latest

  deploy:
    needs: build-and-push
    runs-on: [self-hosted, linux-amd64]
    steps:
      - name: Install Deploy Tools
        run: apk add --no-cache curl kubectl

      - name: Checkout code
        uses: actions/checkout@v4

      - name: Configure Kubeconfig
        # Esse passo garante que o kubectl tenha autoridade para executar comandos
        run: |
          mkdir -p ~/.kube
          cp /etc/rancher/k3s/k3s.yaml ~/.kube/config
          chmod 600 ~/.kube/config

      - name: Sync Registry Secret
        # Copia o secret do namespace forgejo para o namespace do dev automaticamente
        run: |
          kubectl create namespace gohorsejobsdev --dry-run=client -o yaml | kubectl apply -f -
          
          kubectl get secret forgejo-registry-secret --namespace=forgejo -o yaml | \
          sed 's/namespace: forgejo/namespace: gohorsejobsdev/' | \
          kubectl apply -f -

      - name: Deploy to K3s
        run: |
          # Aplica os manifestos (Deployment, Service, etc)
          kubectl apply -f k8s/dev/ -n gohorsejobsdev

          # Força a atualização com a imagem gerada neste commit
          kubectl -n gohorsejobsdev set image deployment/gohorse-backend-dev \
            backend=${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }}
          
          kubectl -n gohorsejobsdev set image deployment/gohorse-backoffice-dev \
            backoffice=${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }}
          
          # Verifica se o deploy estabilizou
          kubectl -n gohorsejobsdev rollout status deployment/gohorse-backend-dev --timeout=120s