deploy.yml

name: Deploy

on:
  workflow_dispatch:
  push:
    tags:
      - 'v*.*.*'

concurrency:
  group: production
  cancel-in-progress: false

jobs:
  validate-configs:
    name: Validate compose.yaml and Caddyfile
    runs-on: ubuntu-latest
    steps:
      - name: Checkout 
        uses: actions/checkout@v6

      - name: Validate compose.yaml
        run: docker compose up --dry-run
      
      - name: Validate Caddyfile
        run: |
          grep -v '^#' .env.example | sed 's/ #.*$//' > .env.validation
          docker run --rm \
            -v ${{ github.workspace }}/caddy:/etc/caddy \
            --env-file .env.validation \
            caddy:latest caddy validate --config /etc/caddy/Caddyfile  

  deploy:
    name: Deploy to production
    needs: validate-configs
    runs-on: ubuntu-latest
    steps:
      - name: Setup SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          echo "${{ secrets.SSH_KNOWN_HOSTS }}" >> ~/.ssh/known_hosts
    
      - name: Deploy with SSH
        run: |
          ssh ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}