name: Deploy to production

on:
  push:
    tags:
      - '*'

jobs:
  check-branch:
    runs-on: ubuntu-latest
    outputs:
      is_prod: ${{ steps.check.outputs.is_prod }}
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Check if tag is from prod branch
        id: check
        run: |
          BRANCHES=$(git branch -r --contains ${{ github.ref }})
          if echo "$BRANCHES" | grep -q "origin/prod"; then
            echo "is_prod=true" >> $GITHUB_OUTPUT
            echo "✅ Tag is from prod branch"
          else
            echo "is_prod=false" >> $GITHUB_OUTPUT
            echo "❌ Tag is NOT from prod branch - skipping deployment"
          fi

  deploy:
    needs: check-branch
    if: needs.check-branch.outputs.is_prod == 'true'
    runs-on: ubuntu-latest
    environment: prod

    steps:
      - name: Deploy to production server
        uses: appleboy/ssh-action@v1.0.3
        with:
          host: ${{ secrets.PROD_SSH_HOST }}
          username: ${{ secrets.PROD_SSH_USER }}
          key: ${{ secrets.PROD_SSH_KEY }}
          script: |
            set -e
            cd /root/AperiSolve

            # update code
            git pull

            # create .env
            cat <<EOF > .env
            MAX_CONTENT_LENGTH=${{ vars.MAX_CONTENT_LENGTH }}
            MAX_PENDING_TIME=${{ vars.MAX_PENDING_TIME }}
            MAX_STORE_TIME=${{ vars.MAX_STORE_TIME }}
            CLEAR_AT_RESTART=${{ vars.CLEAR_AT_RESTART }}
            SKIP_IHDR_FILL=${{ vars.SKIP_IHDR_FILL }}

            FLASK_DEBUG=${{ vars.FLASK_DEBUG }}
            FLASK_ENV=${{ vars.FLASK_ENV }}

            RQ_DASHBOARD_REDIS_URL=${{ secrets.REDIS_URL }}

            POSTGRES_USER=${{ secrets.POSTGRES_USER }}
            POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }}
            POSTGRES_DB=${{ secrets.POSTGRES_DB }}
            DB_URI=${{ secrets.DATABASE_URL }}

            SENTRY_DSN=${{ secrets.SENTRY_DSN }}
            SENTRY_TRACES_SAMPLE_RATE=${{ secrets.SENTRY_TRACES_SAMPLE_RATE }}
            SENTRY_PROFILES_SAMPLE_RATE=${{ secrets.SENTRY_PROFILES_SAMPLE_RATE }}
            SENTRY_RELEASE=${{ secrets.SENTRY_RELEASE }}
            SENTRY_ENVIRONMENT=${{ secrets.SENTRY_ENVIRONMENT }}
            EOF

            # Pull images and deploy
            docker compose pull
            docker compose down
            docker compose up -d
            docker image prune -f