name: Deploy Production

on:
  push:
    branches:
      - main
      - master
  workflow_dispatch:

jobs:
  deploy:
    runs-on: ubuntu-latest
    # If using self-hosted runner, change to:
    # runs-on: self-hosted
    
    steps:
      - name: Checkout code
        run: |
          #!/bin/sh
          git clone $GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git /workspace/repo || true
          cd /workspace/repo
          git fetch origin $GITHUB_REF_NAME
          git checkout $GITHUB_REF_NAME
          git pull origin $GITHUB_REF_NAME

      - name: Build Docker Image
        run: |
          #!/bin/sh
          cd /workspace/repo
          docker build -t merchbay_admin:latest .
          docker save merchbay_admin:latest | gzip > merchbay_admin.tar.gz

      - name: Setup SSH Key
        run: |
          #!/bin/sh
          mkdir -p ~/.ssh
          printf '%s' "$PROD_DEPLOY_SSH_KEY" > ~/.ssh/deploy_key
          chmod 600 ~/.ssh/deploy_key
        env:
          PROD_DEPLOY_SSH_KEY: ${{ secrets.PROD_DEPLOY_SSH_KEY }}

      - name: Transfer Files to Production Server
        run: |
          #!/bin/sh
          cd /workspace/repo
          scp -o StrictHostKeyChecking=no -i ~/.ssh/deploy_key merchbay_admin.tar.gz docker-compose.yml "$PROD_DEPLOY_USER@$PROD_DEPLOY_HOST:/tmp/"
        env:
          PROD_DEPLOY_USER: ${{ secrets.PROD_DEPLOY_USER }}
          PROD_DEPLOY_HOST: ${{ secrets.PROD_DEPLOY_HOST }}

      - name: Deploy to Production Server
        run: |
          #!/bin/sh
          ssh -o StrictHostKeyChecking=no -i ~/.ssh/deploy_key "$PROD_DEPLOY_USER@$PROD_DEPLOY_HOST" << 'ENDSSH'
          #!/bin/sh
        env:
          PROD_DEPLOY_USER: ${{ secrets.PROD_DEPLOY_USER }}
          PROD_DEPLOY_HOST: ${{ secrets.PROD_DEPLOY_HOST }}
          PROD_DB_HOST: ${{ secrets.PROD_DB_HOST }}
          PROD_DB_PORT: ${{ secrets.PROD_DB_PORT }}
          PROD_DB_DATABASE: ${{ secrets.PROD_DB_DATABASE }}
          PROD_DB_USERNAME: ${{ secrets.PROD_DB_USERNAME }}
          PROD_DB_PASSWORD: ${{ secrets.PROD_DB_PASSWORD }}
            # Set deployment directory for production
            DEPLOY_DIR="/var/www/merchbay_admin"
            
            # Create deployment directory if it doesn't exist
            mkdir -p $DEPLOY_DIR
            
            # Load the Docker image
            cd /tmp
            docker load < merchbay_admin.tar.gz
            
            # Copy docker-compose.yml to deployment directory
            cp docker-compose.yml $DEPLOY_DIR/
            
            # Navigate to deployment directory
            cd $DEPLOY_DIR
            
            # Update environment file for production
            cat > .env << EOF
            APP_ENV=production
            APP_DEBUG=false
            APP_URL=https://merchbay.com
            DB_HOST=${{ secrets.PROD_DB_HOST }}
            DB_PORT=${{ secrets.PROD_DB_PORT || 3306 }}
            DB_DATABASE=${{ secrets.PROD_DB_DATABASE }}
            DB_USERNAME=${{ secrets.PROD_DB_USERNAME }}
            DB_PASSWORD=${{ secrets.PROD_DB_PASSWORD }}
            DOMAIN=merchbay.com
            EOF
            
            # Stop existing container (disconnect from Traefik network gracefully)
            docker compose down || true
            
            # Remove old image (optional, keeps only latest)
            docker image prune -f
            
            # Ensure Traefik network exists
            docker network inspect traefik-public >/dev/null 2>&1 || docker network create traefik-public
            
            # Update docker-compose for production
            export DOMAIN=merchbay.com
            export APP_URL=https://merchbay.com
            
            # Start the application (will auto-connect to Traefik with paid SSL)
            docker compose up -d
            
            # Wait for container to be ready
            sleep 10
            
            # Run migrations
            docker compose exec -T app php artisan migrate --force
            
            # Clear and cache configuration
            docker compose exec -T app php artisan config:cache
            docker compose exec -T app php artisan route:cache
            docker compose exec -T app php artisan view:cache
            
            # Cleanup
            rm -f /tmp/merchbay_admin.tar.gz /tmp/docker-compose.yml
            
            echo "Production deployment completed successfully!"
            echo "Application available at: https://merchbay.com"
          ENDSSH

      - name: Health Check
        run: |
          #!/bin/sh
          sleep 10
          curl -f https://merchbay.com || exit 1