name: Server Deploy

on:
    push:
        branches:
            - main

jobs:
    deploy:
        runs-on: ubuntu-docker
        container:
            image: docker:27-cli
        services:
            docker:
                image: docker:27-dind
                env:
                    DOCKER_TLS_CERTDIR: ""
                options: --privileged
        env:
            DOCKER_HOST: tcp://docker:2375
        steps:
            - name: Checkout
              uses: actions/checkout@v4

            - name: Log in to registry
              run: |
                  echo "${{ secrets.REGISTRY_PASSWORD }}" | \
                    docker login ${{ vars.DOCKER_HOST }} \
                      -u "${{ secrets.REGISTRY_USER }}" --password-stdin

            - name: Build and push server image
              run: |
                  IMAGE="${{ vars.DOCKER_HOST }}/${{ github.repository_owner }}/keymanager/server:latest"
                  docker build -t "$IMAGE" -f server/Dockerfile server/
                  docker push "$IMAGE"

            - name: Build and push web image
              run: |
                  IMAGE="${{ vars.DOCKER_HOST }}/${{ github.repository_owner }}/keymanager/web:latest"
                  docker build \
                    --build-arg NEXT_PUBLIC_API_URL="https://${{ vars.DOCKER_HOST }}" \
                    -t "$IMAGE" \
                    -f web/Dockerfile web/
                  docker push "$IMAGE"