name: Build and Deploy

on:
  push:
    branches:
      - main
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v2
        with:
          fetch-depth: 0
      - name: Build application
        run: |
          docker build . -f Dockerfile -t "adriano_fyi:${GITHUB_SHA}"
          mkdir out
          docker save "adriano_fyi:${GITHUB_SHA}" -o "out/adriano_fyi-${GITHUB_SHA}.tar"
      - name: S3 Sync
        uses: jakejarvis/s3-sync-action@v0.5.1
        env:
          AWS_ACCESS_KEY_ID: "TWEELLU28RTD4IUQJXRT"
          AWS_SECRET_ACCESS_KEY: ${{ secrets.LINODE_SECRET_ACCESS_KEY }}
          AWS_S3_BUCKET: "adriano-fyi-static-site"
          AWS_REGION: "us-east-1"
          AWS_S3_ENDPOINT: "https://us-east-1.linodeobjects.com"
          SOURCE_DIR: "out"
  deploy:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Tailscale login
        uses: tailscale/github-action@v2
        with:
          version: 1.86.0
          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
          oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
          tags: tag:github-action
        env:
          ADDITIONAL_ARGS: "--accept-dns"
      - name: Setup `nomad`
        uses: hashicorp/setup-nomad@main
        id: setup
        with:
          version: 1.9.0
      - name: Deploy nomad job
        run: |
          tailscale status
          nomad job run -var version=${GITHUB_SHA} -var secret_access_key=${{secrets.AWS_SECRET_ACCESS_KEY}} job.nomad.hcl
        env:
          NOMAD_ADDR: http://ncm-0:4646
          NOMAD_TOKEN: ${{ secrets.NOMAD_TOKEN }}