name: Deploy

on:

  push:

    branches:

      - master # goes for production now, will become staging later on

      - production

env:

  REGISTRY: ghcr.io

  IMAGE_NAME: ${{ github.repository }}

jobs:

  build-and-push:

    name: Build & push image

    runs-on: ubuntu-latest

    permissions:

      contents: read

      packages: write

    outputs:

      image_tag: ${{ steps.meta.outputs.version }}

    steps:

      - name: Checkout

        uses: actions/checkout@v4

      - name: Log in to GHCR

        uses: docker/login-action@v3

        with:

          registry: ${{ env.REGISTRY }}

          username: ${{ github.actor }}

          password: ${{ secrets.GHCR_TOKEN }}

      - name: Docker metadata

        id: meta

        uses: docker/metadata-action@v5

        with:

          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

          tags: |

            # main branch => tag "latest"

            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/master' }}

            # production branch => tag "production"

            # type=raw,value=production,enable=${{ github.ref == 'refs/heads/production' }}

            # always tag with short SHA for traceability

            type=sha,prefix=,format=short

      - name: Build and push

        uses: docker/build-push-action@v5

        with:

          context: ./api

          file: ./api/Dockerfile.production

          push: true

          tags: ${{ steps.meta.outputs.tags }}

          labels: ${{ steps.meta.outputs.labels }}