on:
  push:
    branches:
      - main
  pull_request:

env:
  TZ: Europe/Berlin

jobs:
  build:
    runs-on: docker
    container:
      image: docker.io/library/python:3.14-trixie
    steps:
      - name: Pipeline info
        run: |
          echo "Run triggered by ${{ github.event_name }} (${{ github.event.action }}) on ref ${{ github.ref_name }}"

      - name: Install packages
        run: |
          apt update
          apt -y install nodejs git rsync openssh-client
          pip install --upgrade pip

      - uses: actions/checkout@v6

      - name: Install Python packages
        run: |
          pip install -r docs_requirements.txt

      - name: Build website - prod
        if: github.event_name != 'pull_request'
        run: |
          mkdocs build

      - name: Build website - staging
        if: github.event_name == 'pull_request'
        run: |
          sed -i "s#site_url: https://infra-docs.hamburg.ccc.de#site_url: https://staging.infra-docs.hamburg.ccc.de/pr${{ github.event.pull_request.number }}/#" mkdocs.yml
          mkdocs build

      - name: Deploy - Prepare keys
        run: |
          echo "${{ secrets.SSH_DEPLOY_KEY }}" > deploykey.priv
          chmod 400 deploykey.priv
          echo "${{ vars.SSH_KNOWN_HOSTS }}" > ./known_hosts

      - name: Deploy - Upload PR to staging
        if: github.event_name == 'pull_request'
        run: |
          echo "Deploying to staging.infra-docs.hamburg.ccc.de/pr${{ github.event.pull_request.number }}"
          rsync -v -r --delete -e "ssh -i deploykey.priv -o 'UserKnownHostsFile ./known_hosts'" site/ infra-docs-deploy@public-web-static.hosts.hamburg.ccc.de:/var/www/staging.infra-docs.hamburg.ccc.de/pr${{ github.event.pull_request.number }}/

      - name: Deploy - Add comment to PR with staging URL
        if: github.event_name == 'pull_request' && github.event.action == 'opened'
        run: |
          curl \
            -X POST \
            ${{ github.event.pull_request.base.repo.url }}/issues/${{ github.event.pull_request.number }}/comments \
            -H "Content-Type: application/json" \
            -H "Authorization: token $FORGEJO_TOKEN" \
            --data '{ "body": "You can view your changes at https://staging.infra-docs.hamburg.ccc.de/pr${{ github.event.pull_request.number }}/" }'

      - name: Deploy - Upload to prod
        if: github.event_name != 'pull_request'
        run: |
          rsync -v -r --delete -e "ssh -i deploykey.priv -o 'UserKnownHostsFile ./known_hosts'" site/ infra-docs-deploy@public-web-static.hosts.hamburg.ccc.de:/var/www/infra-docs.hamburg.ccc.de/

      - uses: actions/upload-artifact@v7
        if: github.event_name == 'pull_request'
        with:
          name: docs-build
          path: site/
          retention-days: 3