name: Deploy to production

on:
  workflow_run:
    workflows:
      - Docker Image CI
    types:
      - completed
    branches:
      - prod  # Only triggers for tags in the production branch

jobs:
  deploy:
    # Deploys only if the build was successfuli
    if: ${{ github.event.workflow_run.conclusion == 'success' }}

    runs-on: ubuntu-latest
    environment: production

    steps:
      - name: Deploy to production server
        uses: appleboy/ssh-action@v1.0.3
        with:
          host: ${{ secrets.PROD_SSH_HOST }}
          username: ${{ secrets.PROD_SSH_USER }}
          key: ${{ secrets.PROD_SSH_KEY }}
          script: |
            set -e
            cd /root/AperiSolve

            # update code
            git pull

            # create .env
            cat <<EOF > .env
            MAX_CONTENT_LENGTH=${{ vars.MAX_CONTENT_LENGTH }}
            MAX_PENDING_TIME=${{ vars.MAX_PENDING_TIME }}
            MAX_STORE_TIME=${{ vars.MAX_STORE_TIME }}
            CLEAR_AT_RESTART=${{ vars.CLEAR_AT_RESTART }}
            SKIP_IHDR_FILL=${{ vars.SKIP_IHDR_FILL }}

            FLASK_DEBUG=${{ vars.FLASK_DEBUG }}
            FLASK_ENV=${{ vars.FLASK_ENV }}

            RQ_DASHBOARD_REDIS_URL=${{ secrets.REDIS_URL }}

            POSTGRES_USER=${{ secrets.POSTGRES_USER }}
            POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }}
            POSTGRES_DB=${{ secrets.POSTGRES_DB }}
            DB_URI=${{ secrets.DATABASE_URL }}

            SENTRY_DSN=${{ secrets.SENTRY_DSN }}
            SENTRY_TRACES_SAMPLE_RATE=${{ secrets.SENTRY_TRACES_SAMPLE_RATE }}
            SENTRY_PROFILES_SAMPLE_RATE=${{ secrets.SENTRY_PROFILES_SAMPLE_RATE }}
            SENTRY_RELEASE=${{ secrets.SENTRY_RELEASE }}
            SENTRY_ENVIRONMENT=${{ secrets.SENTRY_ENVIRONMENT }}
            EOF

            # Pull images and deploy
            docker compose pull
            docker compose down
            docker compose up -d
            docker image prune -f