name: Build & Deploy Go API

on:
  push:
    branches: [main]

env:
  REGISTRY: 192.168.1.212:1180/library

jobs:
  build:
    runs-on: self-hosted
    steps:
      - name: Install build tools
        run: apk add --no-cache curl git docker-cli 2>/dev/null || true

      - name: Clone + prepare
        run: |
          WORK=/root/.cache/demo-go-api
          mkdir -p $WORK
          cd $WORK
          if [ -d .git ]; then
            git reset --hard origin/main
            git clean -fd
          else
            git clone http://joe:${GITEA_TOKEN}@192.168.1.212:3000/joe/demo-go-api.git .
          fi

      - name: Login to Harbor
        run: docker login 192.168.1.212:1180 -u admin -p "$HARBOR_PASSWORD"
        env:
          HARBOR_PASSWORD: ${{ secrets.HARBOR_PASSWORD }}

      - name: Build & push image
        run: |
          cd /root/.cache/demo-go-api
          SHORT=${GITHUB_SHA::8}
          TAG="${REGISTRY}/demo-go-api:${SHORT}"
          LATEST="${REGISTRY}/demo-go-api:latest"
          docker build --build-arg VERSION=${SHORT} -t "${TAG}" -t "${LATEST}" .
          docker push "${TAG}"
          docker push "${LATEST}"
          echo "✓ Pushed ${TAG}"
        env:
          GITHUB_SHA: ${{ github.sha }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          REGISTRY: ${{ env.REGISTRY }}

      - name: Update image tag in values.yaml (commit-back GitOps)
        run: |
          set -e
          WORK=/root/.cache/demo-go-api
          cd $WORK
          SHORT=${GITHUB_SHA::8}
          echo "Updating tag to ${SHORT}"
          sed -i "s/^  tag:.*/  tag: \"${SHORT}\"/" deploy/helm/values.yaml
          echo "--- diff ---"
          git diff deploy/helm/values.yaml || true
          git config user.email "ci@local"
          git config user.name "gitea-ci"
          if git diff --quiet deploy/helm/values.yaml; then
            echo "No changes to commit"
            exit 0
          fi
          git add deploy/helm/values.yaml
          git commit -m "ci: update image tag to ${SHORT}"
          git push origin main
          echo "✓ Pushed tag ${SHORT}"
        env:
          GITHUB_SHA: ${{ github.sha }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}