name: Build & Deploy Java API

on:
  push:
    branches: [main]

env:
  REGISTRY: harbor.cjjhc.top/library
  APP_NAME: demo-java-api

jobs:
  build:
    runs-on: self-hosted

    steps:
      - name: Install build tools
        run: |
          apk add --no-cache curl git docker-cli maven openjdk17 2>/dev/null || true

      - name: Clone + prepare
        run: |
          WORK=/root/.cache/${{ env.APP_NAME }}
          rm -rf "$WORK"
          mkdir -p "$WORK"
          cd "$WORK"
          git clone https://joe:${GITEA_TOKEN}@git.cjjhc.top/joe/${{ env.APP_NAME }}.git .

      - name: Build JAR
        run: |
          cd /root/.cache/${{ env.APP_NAME }}
          mvn clean package -DskipTests

      - name: Login to Harbor
        run: docker login ${{ env.REGISTRY }} -u admin -p "$HARBOR_PASSWORD"
        env:
          HARBOR_PASSWORD: ${{ secrets.HARBOR_PASSWORD }}

      - name: Build & push Docker image
        run: |
          cd /root/.cache/${{ env.APP_NAME }}
          SHORT=${GITHUB_SHA::8}
          TAG="${{ env.REGISTRY }}/${{ env.APP_NAME }}:${SHORT}"
          LATEST="${{ env.REGISTRY }}/${{ env.APP_NAME }}:latest"
          docker build -t "${TAG}" -t "${LATEST}" .
          docker push "${TAG}"
          docker push "${LATEST}"
          echo "✓ Pushed ${TAG}"
        env:
          GITHUB_SHA: ${{ github.sha }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}

      - name: Update image tag in values.yaml (commit-back GitOps)
        run: |
          set -e
          WORK=/root/.cache/${{ env.APP_NAME }}
          rm -rf "$WORK"
          mkdir -p "$WORK"
          cd "$WORK"
          git clone https://joe:${GITEA_TOKEN}@git.cjjhc.top/joe/${{ env.APP_NAME }}.git .
          SHORT=${GITHUB_SHA::8}
          sed -i "s/^  tag:.*/  tag: \"${SHORT}\"/" deploy/helm/values.yaml
          git config user.email "ci@local"
          git config user.name "gitea-ci"
          git add deploy/helm/values.yaml
          git commit -m "ci: update image tag to ${SHORT}" || echo "nothing to commit"
          git push origin main
          echo "✓ Pushed tag ${SHORT}"
        env:
          GITHUB_SHA: ${{ github.sha }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}