name: Deploy Backend and Backoffice Dev

on:
  workflow_dispatch:
  push:
    branches:
      - dev

env:
  REGISTRY: pipe.gohorsejobs.com
  IMAGE_NAMESPACE: bohessefm
  # AJUSTE: Usando 127.0.0.1 para evitar falha de resolução DNS no Alpine
  DOCKER_HOST: tcp://127.0.0.1:2375

jobs:
  build-and-push:
    runs-on:
      - ubuntu-latest
    defaults:
      run:
        shell: sh

    steps:
      - name: Install System Dependencies
        run: apk add --no-cache git docker-cli

      - name: Checkout code
        uses: actions/checkout@v4

      - name: Docker login
        run: |
          # Tentativa direta com retry simples de 5 segundos se o daemon estiver "acordando"
          sleep 5
          echo "${{ secrets.FORGEJO_TOKEN }}" | docker login ${{ env.REGISTRY }} \
            -u ${{ env.IMAGE_NAMESPACE }} --password-stdin

      - name: Build & Push Backend
        run: |
          docker build -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }} \
            -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:latest ./backend
          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }}
          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:latest

      - name: Build & Push Backoffice
        run: |
          docker build -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }} \
            -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:latest ./backoffice
          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }}
          docker push ${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:latest

  deploy-to-k3s:
    needs: build-and-push
    runs-on:
      - ubuntu-latest
    steps:
      - name: Install Deploy Tools
        run: |
          apk add --no-cache git curl
          if ! command -v kubectl >/dev/null; then
            curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
            chmod +x kubectl
            mv kubectl /usr/local/bin/
          fi

      - name: Checkout code
        uses: actions/checkout@v4

      - name: Deploy to K3s
        run: |
          kubectl create namespace gohorsejobsdev --dry-run=client -o yaml | kubectl apply -f -

          kubectl -n gohorsejobsdev create secret docker-registry forgejo-registry \
            --docker-server=${{ env.REGISTRY }} \
            --docker-username=${{ env.IMAGE_NAMESPACE }} \
            --docker-password="${{ secrets.FORGEJO_TOKEN }}" \
            --dry-run=client -o yaml | kubectl apply -f -

          kubectl -n gohorsejobsdev create secret generic backend-secrets \
            --from-literal=JWT_SECRET="${{ vars.JWT_SECRET }}" \
            --from-literal=AMQP_URL="${{ vars.AMQP_URL }}" \
            --from-literal=DATABASE_URL="${{ vars.DATABASE_URL }}" \
            --dry-run=client -o yaml | kubectl apply -f -

          kubectl apply -f k8s/dev/ -n gohorsejobsdev

          kubectl -n gohorsejobsdev set image deployment/gohorse-backend-dev \
            backend=${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/gohorsejobs:${{ github.sha }}
          
          kubectl -n gohorsejobsdev set image deployment/gohorse-backoffice-dev \
            backoffice=${{ env.REGISTRY }}/${{ env.IMAGE_NAMESPACE }}/backoffice:${{ github.sha }}

          kubectl -n gohorsejobsdev rollout status deployment/gohorse-backend-dev --timeout=60s