name: build-deploy-junohub-ec2

env:
  IMAGE_NAME: junohub-app
  IMAGE_TAG: ${{ github.sha }}
  CONTAINER_NAME: junohub-app
  REMOTE_DIR: /home/JUNO

on:
  workflow_dispatch:
  push:
    branches:
      - main
    paths-ignore:
      - "*.md"
      - ".gitignore"
      - "docs/**"

jobs:
  deploy:
    runs-on: ubuntu-22.04

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Prepare deployment env file
        run: |
          echo "IMAGE_NAME=${{ env.IMAGE_NAME }}" > .env
          echo "IMAGE_TAG=${{ env.IMAGE_TAG }}" >> .env
          echo "CONTAINER_NAME=${{ env.CONTAINER_NAME }}" >> .env
          echo "NODE_ENV=production" >> .env
          cat <<'EOF' >> .env
          ${{ secrets.EC2_ENV }}
          EOF

      - name: Build Docker image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: Dockerfile
          push: false
          load: true
          tags: |
            ${{ env.IMAGE_NAME }}:latest
            ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Save Docker image tar
        run: |
          mkdir -p docker
          docker save -o docker/junohub-app_${{ env.IMAGE_TAG }}.tar ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}

      - name: Setup SSH key
        run: |
          echo "${{ secrets.EC2_SSH_KEY }}" | tr -d '\r' > ssh_key.pem
          chmod 400 ssh_key.pem

      - name: Copy deployment files to EC2
        run: |
          ssh -i ssh_key.pem -o StrictHostKeyChecking=no ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }} "mkdir -p '${{ env.REMOTE_DIR }}/prisma'"
          scp -i ssh_key.pem -o StrictHostKeyChecking=no .env ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:${{ env.REMOTE_DIR }}/.env
          scp -i ssh_key.pem -o StrictHostKeyChecking=no docker-compose.ec2.yml ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:${{ env.REMOTE_DIR }}/docker-compose.ec2.yml
          scp -i ssh_key.pem -o StrictHostKeyChecking=no prisma/init-pgvector.sql ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:${{ env.REMOTE_DIR }}/prisma/init-pgvector.sql
          scp -i ssh_key.pem -o StrictHostKeyChecking=no docker/junohub-app_${{ env.IMAGE_TAG }}.tar ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:${{ env.REMOTE_DIR }}/junohub-app_${{ env.IMAGE_TAG }}.tar

      - name: Deploy on EC2 with docker compose
        run: |
          ssh -i ssh_key.pem -o StrictHostKeyChecking=no ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }} << 'ENDSSH'
          set -e
          cd ${{ env.REMOTE_DIR }}
          docker load -i junohub-app_${{ env.IMAGE_TAG }}.tar
          rm -f junohub-app_${{ env.IMAGE_TAG }}.tar
          docker compose -f docker-compose.ec2.yml --env-file .env up -d --remove-orphans db
          docker compose -f docker-compose.ec2.yml --env-file .env exec -T db sh -lc "psql -U \"\${POSTGRES_USER:-postgres}\" -d \"\${POSTGRES_DB:-dropshipping}\" -c \"CREATE EXTENSION IF NOT EXISTS vector;\""
          # Stop and replace app container only (no volume removal)
          docker compose -f docker-compose.ec2.yml --env-file .env stop app || true
          docker compose -f docker-compose.ec2.yml --env-file .env rm -f app || true
          docker compose -f docker-compose.ec2.yml --env-file .env up -d --no-deps --remove-orphans app
          docker compose -f docker-compose.ec2.yml --env-file .env ps
          ENDSSH

      - name: Cleanup local artifacts
        if: always()
        run: |
          rm -f ssh_key.pem
          rm -f .env
          rm -f docker/*.tar || true