name: Build & Push

on:
    push:
        branches: ["main"]
        tags: ["v*"]
    pull_request:

env:
    REGISTRY: git.fristy.net
    IMAGE_NAME: fristy/fristynet

jobs:
    check:
        name: Lint & Build
        runs-on: ubuntu-latest
        steps:
            - name: Checkout
              uses: actions/checkout@v4
            - name: Setup pnpm
              uses: pnpm/action-setup@v4
            - name: Get pnpm store path
              id: pnpm-store
              run: echo "path=$(pnpm store path --silent)" >> "$GITHUB_OUTPUT"
            - name: Cache pnpm store
              uses: actions/cache@v4
              with:
                  path: ${{ steps.pnpm-store.outputs.path }}
                  key: ${{ runner.os }}-pnpm-${{ hashFiles('pnpm-lock.yaml') }}
                  restore-keys: |
                      ${{ runner.os }}-pnpm-
            - name: Setup Node
              uses: actions/setup-node@v4
              with:
                  node-version: lts/*
            - name: Install dependencies
              run: pnpm install --frozen-lockfile
            - name: Check formatting
              run: pnpm format:check
            - name: Lint
              run: pnpm lint
            - name: Build
              run: pnpm build

    image:
        name: Build & Push Image
        needs: check
        if: github.event_name == 'push'
        runs-on: ubuntu-latest
        permissions:
            contents: read
            packages: write
        steps:
            - name: Checkout
              uses: actions/checkout@v4
            - name: Login to registry
              uses: docker/login-action@v3
              with:
                  registry: ${{ env.REGISTRY }}
                  username: ${{ github.actor }}
                  password: ${{ secrets.REGISTRY_TOKEN }}
            - name: Resolve tags
              id: meta
              uses: docker/metadata-action@v5
              with:
                  images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
                  tags: |
                      type=raw,value=latest,enable={{is_default_branch}}
                      type=semver,pattern={{version}}
                      type=sha,prefix=
            - name: Build & push
              uses: docker/build-push-action@v6
              with:
                  context: .
                  push: true
                  tags: ${{ steps.meta.outputs.tags }}
                  labels: ${{ steps.meta.outputs.labels }}

    deploy:
        name: Trigger Deploy
        needs: image
        if: github.ref == 'refs/heads/main'
        runs-on: ubuntu-latest
        steps:
            - name: Trigger Deploy
              run: |
                  curl --fail -X POST "${{ secrets.WEBHOOK_URL }}"