name: build-and-deploy

on:
  push:
    branches: [ main ]

jobs:
  build-and-deploy:
    runs-on: docker
    env:
      REG: gitea.nucleoriofrio.com/nucleo000
      RADIUS_CLIENTS_CIDR: 192.168.87.0/24
      RADIUS_SHARED_SECRET: tamosbien
    steps:
      - uses: actions/checkout@v3
      - uses: docker/setup-buildx-action@v2
      - uses: docker/login-action@v2
        with:
          registry: gitea.nucleoriofrio.com
          username: nucleo000
          password: 7bc7b2fcd283bd6a251bef3ede368b7f897c919d

      - name: Build+push radiusnucleo (with SPA)
        run: |
          docker build -t $REG/radiusnucleo:${{ github.sha }} -t $REG/radiusnucleo:latest -f node-api/Dockerfile .
          docker push $REG/radiusnucleo:${{ github.sha }}
          docker push $REG/radiusnucleo:latest

      - name: Build+push radiusnucleo-freeradius
        run: |
          docker build -t $REG/radiusnucleo-freeradius:${{ github.sha }} -t $REG/radiusnucleo-freeradius:latest ./freeradius
          docker push $REG/radiusnucleo-freeradius:${{ github.sha }}
          docker push $REG/radiusnucleo-freeradius:latest

      - name: Ensure external docker networks exist
        run: |
          docker network inspect principal >/dev/null 2>&1 || docker network create principal
          docker network inspect radiusnucleo_radius_net >/dev/null 2>&1 || docker network create radiusnucleo_radius_net

      - name: Pull fresh images used in compose
        run: docker compose -f docker-compose.yml pull

      - name: Clean up stack
        run: docker compose -f docker-compose.yml --project-name radiusnucleo down

      - name: Update stack
        run: docker compose -f docker-compose.yml --project-name radiusnucleo up -d --remove-orphans

      - name: Show service status
        run: docker compose -f docker-compose.yml --project-name radiusnucleo ps