name: Publish Container

on:
  push:
    branches:
      - master
  workflow_dispatch:

env:
  DOTNET_VERSION: 10.0.x
  REGISTRY: ${{ vars.FORGEJO_REGISTRY }}
  IMAGE_NAMESPACE: ${{ vars.IMAGE_NAMESPACE }}
  IMAGE_NAME: ${{ vars.IMAGE_NAME }}

jobs:
  publish:
    runs-on: docker
    env:
      # Allow explicit override from Forgejo variables.
      DOCKER_HOST: ${{ vars.DOCKER_HOST }}

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup .NET
        uses: actions/setup-dotnet@v4
        with:
          dotnet-version: ${{ env.DOTNET_VERSION }}

      - name: Validate workflow variables
        run: |
          set -eu
          if [ -z "${REGISTRY}" ]; then echo "vars.FORGEJO_REGISTRY is required"; exit 1; fi
          if [ -z "${IMAGE_NAMESPACE}" ]; then echo "vars.IMAGE_NAMESPACE is required"; exit 1; fi
          if [ -z "${IMAGE_NAME}" ]; then echo "vars.IMAGE_NAME is required"; exit 1; fi

      - name: Validate registry secrets
        run: |
          set -eu
          if [ -z "${{ secrets.FORGEJO_REGISTRY_USERNAME }}" ]; then echo "secrets.FORGEJO_REGISTRY_USERNAME is required"; exit 1; fi
          if [ -z "${{ secrets.FORGEJO_REGISTRY_TOKEN }}" ]; then echo "secrets.FORGEJO_REGISTRY_TOKEN is required"; exit 1; fi

      - name: Ensure Docker CLI exists
        run: |
          set -eu
          if command -v docker >/dev/null 2>&1; then
            docker --version
            exit 0
          fi

          ARCH="$(uname -m)"
          case "${ARCH}" in
            x86_64) DOCKER_ARCH="x86_64" ;;
            aarch64|arm64) DOCKER_ARCH="aarch64" ;;
            *) echo "Unsupported architecture for Docker CLI bootstrap: ${ARCH}"; exit 1 ;;
          esac

          DOCKER_CLI_VERSION="27.5.1"
          curl -fsSL "https://download.docker.com/linux/static/stable/${DOCKER_ARCH}/docker-${DOCKER_CLI_VERSION}.tgz" -o docker.tgz
          tar -xzf docker.tgz
          mkdir -p "${HOME}/.local/bin"
          mv docker/docker "${HOME}/.local/bin/docker"
          chmod +x "${HOME}/.local/bin/docker"
          echo "${HOME}/.local/bin" >> "${GITHUB_PATH}"
          "${HOME}/.local/bin/docker" --version

      - name: Resolve Docker daemon endpoint
        run: |
          set -eu

          if [ -n "${DOCKER_HOST:-}" ]; then
            echo "Using configured DOCKER_HOST=${DOCKER_HOST}"
            exit 0
          fi

          if [ -S /var/run/docker.sock ]; then
            echo "DOCKER_HOST=unix:///var/run/docker.sock" >> "${GITHUB_ENV}"
            echo "Resolved DOCKER_HOST from local docker socket"
            exit 0
          fi

          if getent hosts forgejo-docker-in-docker >/dev/null 2>&1; then
            echo "DOCKER_HOST=tcp://forgejo-docker-in-docker:2375" >> "${GITHUB_ENV}"
            echo "Resolved DOCKER_HOST from compose service DNS"
            exit 0
          fi

          GATEWAY_IP="$(ip route | awk '/default/ { print $3; exit }')"
          if [ -n "${GATEWAY_IP}" ]; then
            echo "DOCKER_HOST=tcp://${GATEWAY_IP}:2375" >> "${GITHUB_ENV}"
            echo "Resolved DOCKER_HOST from container default gateway: ${GATEWAY_IP}"
            exit 0
          fi

          echo "Could not determine a reachable Docker daemon endpoint. Set vars.DOCKER_HOST explicitly."
          exit 1

      - name: Check Docker daemon connectivity
        run: |
          set -eu
          echo "Using DOCKER_HOST=${DOCKER_HOST}"
          docker version
          docker info >/dev/null

      - name: Restore and publish app
        run: dotnet publish src/MaddoScientisto.Web/MaddoScientisto.Web.csproj -c Release -o ./artifacts/publish

      - name: Login to Forgejo registry
        run: |
          echo "${{ secrets.FORGEJO_REGISTRY_TOKEN }}" | docker login "${REGISTRY}" -u "${{ secrets.FORGEJO_REGISTRY_USERNAME }}" --password-stdin

      - name: Build image
        run: |
          set -eu
          IMAGE_REF="${REGISTRY}/${IMAGE_NAMESPACE}/${IMAGE_NAME}"
          SHORT_SHA="$(echo "${GITHUB_SHA}" | cut -c1-12)"
          docker build -t "${IMAGE_REF}:sha-${SHORT_SHA}" -t "${IMAGE_REF}:latest" .

      - name: Push image tags
        run: |
          set -eu
          IMAGE_REF="${REGISTRY}/${IMAGE_NAMESPACE}/${IMAGE_NAME}"
          SHORT_SHA="$(echo "${GITHUB_SHA}" | cut -c1-12)"
          docker push "${IMAGE_REF}:sha-${SHORT_SHA}"
          docker push "${IMAGE_REF}:latest"