name: Deployment
on:
  push:
    branches:
      - main

jobs:
  deploy-docker:
    runs-on: ubuntu-latest
    steps:
      - name: Validate deployment secrets
        env:
          SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
          SSH_PUBLIC_KEY: ${{ secrets.SSH_PUBLIC_KEY }}
          HETZNER_TOKEN: ${{ secrets.HETZNER_TOKEN }}
        run: |
          set -e
          if [ -z "$SSH_PRIVATE_KEY" ]; then
            echo "Missing SSH_PRIVATE_KEY secret"
            exit 1
          fi
          if [ -z "$SSH_PUBLIC_KEY" ]; then
            echo "Missing SSH_PUBLIC_KEY secret"
            exit 1
          fi
          if [ -z "$HETZNER_TOKEN" ]; then
            echo "Missing HETZNER_TOKEN secret"
            exit 1
          fi
      - name: Deploy via SSH
        uses: appleboy/ssh-action@v0.1.10
        with:
          host: 172.17.0.1
          username: root
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          # Wir übergeben die Secrets als Environment-Variablen an den SSH-Befehl
          envs: HETZNER_TOKEN,SSH_KEY
          script: |
            set -e
            cd /root/iac
            git fetch origin main && git reset --hard origin/main
            
            # Kopiere das Template und ersetze die Platzhalter mit sed
            cp terraform.tfvars.example terraform.tfvars
            sed -i "s|__HCLOUD_TOKEN__|${HETZNER_TOKEN}|g" terraform.tfvars
            sed -i "s|__SSH_KEY__|${SSH_KEY}|g" terraform.tfvars
            
            terraform init
            terraform apply -auto-approve
            
            echo "Deployment successful"
        env:
          HETZNER_TOKEN : ${{ secrets.HETZNER_TOKEN }}
          SSH_KEY: ${{ secrets.SSH_PUBLIC_KEY }}