# Build talk-pro and rsync dist/ to the marketing VPS (talkpro.info).
#
# Required Gitea repo secret (Settings → Secrets → Actions):
#   TALKPRO_SSH_PRIVATE_KEY  full PEM for ubuntu@talkpro (same as luis-only.pem)
#
# Optional secrets (override defaults below):
#   TALKPRO_HOST             default 13.214.179.69
#   TALKPRO_USER             default ubuntu
#   TALKPRO_REMOTE_ROOT      default /home/ubuntu/talkpro
#
# Requires a runner with: node 22+, npm, rsync, ssh, ssh-keyscan.

name: Deploy to talkpro

on:
  push:
    branches:
      - main
      - master
  workflow_dispatch:

env:
  TALKPRO_HOST: "13.214.179.69"
  TALKPRO_USER: ubuntu
  TALKPRO_REMOTE_ROOT: /home/ubuntu/talkpro

jobs:
  build-and-sync:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: "22"
          cache: npm

      - name: Check deploy secrets
        env:
          TALKPRO_SSH_PRIVATE_KEY: ${{ secrets.TALKPRO_SSH_PRIVATE_KEY }}
        run: |
          if [ -z "${TALKPRO_SSH_PRIVATE_KEY}" ]; then
            echo "ERROR: Missing Gitea secret TALKPRO_SSH_PRIVATE_KEY"
            echo "Add it under Repository → Settings → Secrets (Actions)."
            echo "Value: full contents of your ubuntu@talkpro SSH private key (PEM)."
            exit 1
          fi

      - name: Apply optional secret overrides
        env:
          SECRET_HOST: ${{ secrets.TALKPRO_HOST }}
          SECRET_USER: ${{ secrets.TALKPRO_USER }}
          SECRET_ROOT: ${{ secrets.TALKPRO_REMOTE_ROOT }}
        run: |
          [ -n "$SECRET_HOST" ] && echo "TALKPRO_HOST=$SECRET_HOST" >> "$GITHUB_ENV"
          [ -n "$SECRET_USER" ] && echo "TALKPRO_USER=$SECRET_USER" >> "$GITHUB_ENV"
          [ -n "$SECRET_ROOT" ] && echo "TALKPRO_REMOTE_ROOT=$SECRET_ROOT" >> "$GITHUB_ENV"

      - name: Trust host key
        run: |
          mkdir -p ~/.ssh
          chmod 700 ~/.ssh
          ssh-keyscan -H "$TALKPRO_HOST" >> ~/.ssh/known_hosts 2>/dev/null || true

      - name: Build and rsync to talkpro
        env:
          TALKPRO_SSH_PRIVATE_KEY: ${{ secrets.TALKPRO_SSH_PRIVATE_KEY }}
        run: bash scripts/deploy-talkpro.sh