Jenkinsfile

pipeline {
    agent any

    environment {
        DOCKERHUB = credentials('dockerhub')     // DockerHub creds
        VAULT_PASS = credentials('vault-pass')   // Vault password only
    }

    stages {

        stage('Clone Repository') {
            steps {
                git branch: 'main',
                    url: 'https://github.com/praneeth2406/Todo-Mernstack'
            }
        }

        stage('Build Backend Image') {
            steps {
                sh 'docker build -t praneeth2406/todo-backend:latest ./backend'
            }
        }

        stage('Build Frontend Image') {
            steps {
                sh 'docker build -t praneeth2406/todo-frontend:latest ./frontend'
            }
        }

        stage('Docker Login') {
            steps {
                sh """
                echo '${DOCKERHUB_PSW}' | docker login -u '${DOCKERHUB_USR}' --password-stdin
                """
            }
        }

        stage('Push Docker Images') {
            steps {
                sh 'docker push praneeth2406/todo-backend:latest'
                sh 'docker push praneeth2406/todo-frontend:latest'
            }
        }

        stage('Prepare Vault Password') {
            steps {
                sh '''
                echo "$VAULT_PASS" > vault-pass.txt
                '''
            }
        }

        stage('Deploy using Ansible') {
            steps {
                sshagent(['ec2-ssh-key']) {
                    sh '''
                    ssh -o StrictHostKeyChecking=no ubuntu@65.1.111.66 '
                        cd /home/ubuntu/todo-app/ansible &&
                        ansible-playbook -i inventory.ini deploy.yml --vault-password-file vault-pass.txt
                    '
                    '''
                }
            }
        }
    }

    post {
        always {
            node {
                sh 'rm -f vault-pass.txt || true'
            }
        }
    }
}