# Build talk-pro and rsync dist/ to the marketing VPS (talkpro.info).
#
# Required Gitea repo secret (Settings → Secrets → Actions):
#   TALKPRO_SSH_PRIVATE_KEY  full PEM for ubuntu@talkpro (same as luis-only.pem)
#
# Host/user/path defaults are in the `env:` block below (edit there if needed).
#
# Requires a runner with: node 22+, npm, rsync, ssh, ssh-keyscan.

name: Deploy to talkpro

on:
  push:
    branches:
      - main
      - master
  workflow_dispatch:

env:
  TALKPRO_HOST: "13.214.179.69"
  TALKPRO_USER: ubuntu
  TALKPRO_REMOTE_ROOT: /home/ubuntu/talkpro

jobs:
  build-and-sync:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "22"
          cache: npm

      - name: Check deploy secrets
        env:
          TALKPRO_SSH_PRIVATE_KEY: ${{ secrets.TALKPRO_SSH_PRIVATE_KEY }}
        run: |
          if [ -z "${TALKPRO_SSH_PRIVATE_KEY}" ]; then
            echo "ERROR: Missing Gitea secret TALKPRO_SSH_PRIVATE_KEY"
            echo "Add it under Repository → Settings → Secrets (Actions)."
            echo "Value: full contents of your ubuntu@talkpro SSH private key (PEM)."
            exit 1
          fi

      - name: Install rsync and SSH client
        run: |
          if command -v rsync >/dev/null && command -v ssh >/dev/null; then
            echo "rsync and ssh already installed"
            exit 0
          fi
          if command -v apt-get >/dev/null 2>&1; then
            sudo apt-get update -qq
            sudo apt-get install -y -qq rsync openssh-client
          elif command -v apk >/dev/null 2>&1; then
            sudo apk add --no-cache rsync openssh-client-default
          elif command -v dnf >/dev/null 2>&1; then
            sudo dnf install -y rsync openssh-clients
          else
            echo "ERROR: Could not install rsync — apt-get, apk, or dnf required" >&2
            exit 1
          fi
          command -v rsync
          command -v ssh

      - name: Trust host key
        run: |
          mkdir -p ~/.ssh
          chmod 700 ~/.ssh
          ssh-keyscan -H "$TALKPRO_HOST" >> ~/.ssh/known_hosts 2>/dev/null || true

      - name: Build and rsync to talkpro
        env:
          TALKPRO_SSH_PRIVATE_KEY: ${{ secrets.TALKPRO_SSH_PRIVATE_KEY }}
        run: bash scripts/deploy-talkpro.sh