name: Release

# Livraison par tag : un tag "vX.Y.Z" déclenche build + push registry + release Gitea
# + redéploiement de l'app TrueNAS "mkv2avi".
on:
  push:
    tags:
      - "v*"

permissions:
  contents: write   # créer la release Gitea

env:
  # Registry standalone (Distribution) — auth via secrets REGISTRY_USERNAME/PASSWORD.
  # (Le registry INTÉGRÉ de Gitea git.maisongrondin.fr refuse ces creds.)
  REGISTRY: registry.maisongrondin.fr
  IMAGE: registry.maisongrondin.fr/alexandre/mkv2avi

jobs:
  release:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Version depuis le tag
        id: ver
        run: echo "version=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"

      - name: Connexion au registry
        run: echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login "$REGISTRY" -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin

      - name: Build & push de l'image
        run: |
          VERSION="${{ steps.ver.outputs.version }}"
          docker build -t "$IMAGE:$VERSION" -t "$IMAGE:latest" .
          docker push "$IMAGE:$VERSION"
          docker push "$IMAGE:latest"

      - name: Release Gitea (+ compose de prod en asset)
        env:
          TOKEN: ${{ secrets.GITEA_TOKEN }}
          API: ${{ github.server_url }}/api/v1/repos/${{ github.repository }}
        run: |
          VERSION="${{ steps.ver.outputs.version }}"
          TAG="${{ github.ref_name }}"
          BODY="Image Docker : \`$IMAGE:$VERSION\`\n\nDéploiement :\n\`docker compose --env-file .env.prod -f docker-compose.prod.yml up -d\`"
          REL_ID=$(curl -sSf -X POST "$API/releases" \
            -H "Authorization: token $TOKEN" -H "Content-Type: application/json" \
            -d "{\"tag_name\":\"$TAG\",\"name\":\"$TAG\",\"body\":\"$BODY\"}" | jq -r '.id')
          echo "Release créée (id=$REL_ID)"
          for f in docker-compose.prod.yml .env.prod.example; do
            curl -sSf -X POST "$API/releases/$REL_ID/assets?name=$f" \
              -H "Authorization: token $TOKEN" \
              -F "attachment=@$f;type=text/plain" >/dev/null
            echo "  asset ajouté : $f"
          done

      # Redéploiement de l'app Custom TrueNAS "mkv2avi" (pull de :latest + restart).
      # ⚠️ Prérequis : l'app "mkv2avi" doit exister sur TrueNAS (sinon 404 → échec).
      # 172.16.11.1 = hôte TrueNAS joignable depuis le conteneur du job.
      - name: Redéployer sur TrueNAS
        run: |
          curl -sf -X POST http://172.16.11.1/api/v2.0/app/redeploy \
            -H "Authorization: Bearer ${{ secrets.TRUENAS_API_KEY }}" \
            -H "Content-Type: application/json" \
            -d '"mkv2avi"'