deploy.yml

name: Deploy to Server (Production)

on:
  workflow_dispatch:
    inputs:
      tag:
        description: "Docker image tag (e.g. latest or SHA)"
        required: false
        default: "latest"

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Deploy via SSH
        uses: appleboy/ssh-action@v1.0.3
        with:
          host: ${{ secrets.PROD_SERVER_HOST }}
          username: ${{ secrets.PROD_SERVER_USER }}
          key: ${{ secrets.PROD_SERVER_SSH_KEY }}
          script: |
            set -e
            TAG="${{ github.event.inputs.tag || 'latest' }}"
            COMPOSE_FILE="docker-compose.app.yml"

            echo "🔐 Logging into GHCR..."
            echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u "${{ github.actor }}" --password-stdin

            echo "📂 Switching to /opt/algotecture"
            cd /opt/algotecture

            echo "🔄 Resetting compose file to use :latest placeholders"
            # Replace all tags back to :latest to avoid accumulating many tags
            sed -i -E 's/(ghcr\.io\/[^:]+):[a-zA-Z0-9_.-]+/\1:latest/g' "$COMPOSE_FILE"

            if [ "$TAG" != "latest" ]; then
              echo "🎯 Applying tag: $TAG"
              sed -i "s/:latest/:$TAG/g" "$COMPOSE_FILE"
            fi

            echo "📦 Pulling updated images..."
            docker compose -f "$COMPOSE_FILE" pull

            echo "🚀 Restarting all services..."
            docker compose -f "$COMPOSE_FILE" up -d

            echo "🧹 Cleaning Docker disk space..."
            docker image prune -af
            docker container prune -f
            docker builder prune -af

            echo "🟢 Deployment finished successfully."