name: Build and Deploy

on:
  push:
    branches:
      - main
  schedule:
    - cron: '0 * * * *'  # hourly
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v2
        with:
          fetch-depth: 0
      - name: Build application
        run: |
          docker build . -f Dockerfile -t "adriano_fyi:${GITHUB_SHA}"
          mkdir out
          docker save "adriano_fyi:${GITHUB_SHA}" -o "out/adriano_fyi-${GITHUB_SHA}.tar"
      - name: S3 Sync
        uses: jakejarvis/s3-sync-action@v0.5.1
        env:
          AWS_ACCESS_KEY_ID: "TWEELLU28RTD4IUQJXRT"
          AWS_SECRET_ACCESS_KEY: ${{ secrets.LINODE_SECRET_ACCESS_KEY }}
          AWS_S3_BUCKET: "adriano-fyi-static-site"
          AWS_REGION: "us-east-1"
          AWS_S3_ENDPOINT: "https://us-east-1.linodeobjects.com"
          SOURCE_DIR: "out"
  deploy:
    needs: build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Tailscale login
        uses: tailscale/github-action@v3
        with:
          version: 1.86.2
          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
          oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
          tags: tag:github-action
        env:
          ADDITIONAL_ARGS: "--accept-dns"
      - name: Setup `nomad`
        uses: hashicorp/setup-nomad@main
        id: setup
        with:
          version: 1.11.3
      - name: Deploy nomad job
        run: |
          tailscale status
          # Discover active Nomad server via Tailscale
          NOMAD_SERVER_IP=$(tailscale status --json | jq -r '.Peer[] | select(.Tags[]? == "tag:nomad-server") | select(.Online == true) | .TailscaleIPs[0]' | head -n1)
          echo "Using Nomad server: $NOMAD_SERVER_IP"
          export NOMAD_ADDR="http://${NOMAD_SERVER_IP}:4646"
          nomad job run -var version=${GITHUB_SHA} -var secret_access_key=${{secrets.AWS_SECRET_ACCESS_KEY}} job.nomad.hcl
        env:
          NOMAD_TOKEN: ${{ secrets.NOMAD_TOKEN }}