name: Build and Deploy Backend

on:
  push:
    tags:
      - '*'
  workflow_dispatch:

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest
    
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to Gitea Container Registry
        uses: docker/login-action@v3
        with:
          registry: git.uvpn.shop
          username: ${{ gitea.repository_owner }}
          password: ${{ secrets.ACCESS_TOKEN }}

      - name: Set repository name to lowercase
        id: repo
        run: |
          OWNER=$(echo "${{ gitea.repository_owner }}" | tr '[:upper:]' '[:lower:]')
          REPO=$(echo "${{ github.event.repository.name }}" | tr '[:upper:]' '[:lower:]')
          echo "owner=$OWNER" >> $GITHUB_OUTPUT
          echo "repo=$REPO" >> $GITHUB_OUTPUT
          echo "full_repo=$OWNER/$REPO" >> $GITHUB_OUTPUT
          
          # Также сохраняем полный путь к образу
          echo "image=git.uvpn.shop/$OWNER/$REPO" >> $GITHUB_OUTPUT

      - name: Build and push Docker image
        uses: docker/build-push-action@v5
        with:
          context: .
          push: true
          tags: |
            ${{ steps.repo.outputs.image }}:latest
            ${{ steps.repo.outputs.image }}:${{ gitea.ref_name }}
          cache-from: type=gha
          cache-to: type=gha,mode=max
          build-args: |
            BUILD_VERSION=${{ gitea.ref_name }}
            BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')
            VCS_REF=${{ github.sha }}

      - name: Create Gitea Release via API
        run: |
          TAG_MESSAGE=$(git tag -l --format='%(contents)' "${{ gitea.ref_name }}" 2>/dev/null || echo "Автоматический релиз через CI/CD")
          TAG_MESSAGE_ESCAPED=$(echo "$TAG_MESSAGE" | sed 's/"/\\"/g' | awk '{printf "%s\\n", $0}')
          
          JSON_PAYLOAD=$(cat <<EOF
          {
            "tag_name": "${{ gitea.ref_name }}",
            "name": "Release ${{ gitea.ref_name }}",
            "body": "## Релиз ${{ gitea.ref_name }}\n\n📝 ${TAG_MESSAGE_ESCAPED}\n\n---\n\n**🏷️ Тег:** \`${{ gitea.ref_name }}\`\n**👤 Автор:** @${{ gitea.actor }}\n**📦 Образ:** \`${{ steps.repo.outputs.image }}:${{ gitea.ref_name }}\`\n\n✅ Автоматически собрано и развёрнуто",
            "draft": false,
            "prerelease": false
          }
          EOF
          )
          
          RESPONSE=$(curl -s -w "\n%{http_code}" \
            -X POST \
            -H "Authorization: token ${{ secrets.ACCESS_TOKEN }}" \
            -H "Content-Type: application/json" \
            -d "$JSON_PAYLOAD" \
            "https://git.uvpn.shop/api/v1/repos/${{ gitea.repository }}/releases")
          
          HTTP_CODE=$(echo "$RESPONSE" | tail -n1)
          BODY=$(echo "$RESPONSE" | sed '$d')
          
          if [ "$HTTP_CODE" -eq 201 ]; then
            echo "✅ Релиз успешно создан!"
            echo "$BODY" | jq '.'
          elif [ "$HTTP_CODE" -eq 409 ]; then
            echo "⚠️ Релиз с таким тегом уже существует, пропускаем"
          else
            echo "❌ Ошибка создания релиза (HTTP $HTTP_CODE)"
            echo "$BODY"
            exit 1
          fi

      - name: Install SSH key
        uses: webfactory/ssh-agent@v0.9.0
        with:
          ssh-private-key: ${{ secrets.DEPLOY_SSH_KEY }}

      - name: Deploy on server
        run: |
          ssh -o StrictHostKeyChecking=no ${{ secrets.DEPLOY_USER }}@${{ secrets.DEPLOY_HOST }} << 'EOF'
            cd /opt/uvpn.shop/backend
            
            echo "${{ secrets.ACCESS_TOKEN }}" | docker login git.uvpn.shop -u ${{ gitea.repository_owner }} --password-stdin
            
            # Используем образ с правильным именем в нижнем регистре
            export IMAGE_NAME="git.uvpn.shop/uvpn/backend"
            
            docker compose pull
            docker compose down || true
            docker compose up -d
            docker image prune -f
            docker compose ps
          EOF