# Build and Publish Docker image (runs on push to main - deploy manually)
# Secrets required in Woodpecker: gitea_registry_username, gitea_package_token, discord_webhook_url
# Project must be set to "Trusted" in Woodpecker for the Docker build step (privileged).
when:
  branch: main
  event: push

steps:
  - name: Docker image build
    image: docker:latest
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    commands:
      - set -e
      - echo "=== Building Docker image ==="
      - 'echo "Commit SHA: ${CI_COMMIT_SHA:0:8}"'
      - |
        docker build \
          --tag git.mifi.dev/mifi-holdings/mail-autoconfig:${CI_COMMIT_SHA} \
          --tag git.mifi.dev/mifi-holdings/mail-autoconfig:latest \
          --label "git.commit=${CI_COMMIT_SHA}" \
          --label "git.branch=${CI_COMMIT_BRANCH}" \
          .

  - name: Send Docker Image Build Status Notification (failure)
    image: curlimages/curl
    environment:
        MATTERMOST_BOT_ACCESS_TOKEN:
            from_secret: mattermost_bot_access_token
        MATTERMOST_CHANNEL_ID:
            from_secret: mattermost_pushes_channel_id
        MATTERMOST_POST_API_URL:
            from_secret: mattermost_post_api_url
    commands:
        - |
            BODY=$(printf '{"channel_id":"%s","message":"[%s - Build #%s] Docker image build failure 💩"}' "$MATTERMOST_CHANNEL_ID" "$CI_REPO" "$CI_PIPELINE_NUMBER")
            curl -sS -X POST -H "Content-Type: application/json" -d "$BODY" -H "Authorization: Bearer $MATTERMOST_BOT_ACCESS_TOKEN" $MATTERMOST_POST_API_URL
    depends_on:
        - Docker image build
    when:
        - status: [failure]

  - name: Push to registry
    image: docker:latest
    environment:
      REGISTRY_URL: git.mifi.dev
      REGISTRY_REPO: git.mifi.dev/mifi-holdings/mail-autoconfig
      REGISTRY_USERNAME:
        from_secret: gitea_registry_username
      REGISTRY_PASSWORD:
        from_secret: gitea_package_token
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    depends_on:
      - Docker image build
    commands:
      - set -e
      - echo "=== Pushing to registry ==="
      - echo "$REGISTRY_PASSWORD" | docker login "$REGISTRY_URL" -u "$REGISTRY_USERNAME" --password-stdin
      - docker push $REGISTRY_REPO:${CI_COMMIT_SHA}
      - docker push $REGISTRY_REPO:latest
      - echo "✓ Images pushed successfully"

  - name: Send Push to Registry Status Notification (success)
    image: curlimages/curl
    environment:
        MATTERMOST_BOT_ACCESS_TOKEN:
            from_secret: mattermost_bot_access_token
        MATTERMOST_CHANNEL_ID:
            from_secret: mattermost_pushes_channel_id
        MATTERMOST_POST_API_URL:
            from_secret: mattermost_post_api_url
    commands:
        - |
            BODY=$(printf '{"channel_id":"%s","message":"[%s - Build #%s] Push to registry success 🎉"}' "$MATTERMOST_CHANNEL_ID" "$CI_REPO" "$CI_PIPELINE_NUMBER")
            curl -sS -X POST -H "Content-Type: application/json" -d "$BODY" -H "Authorization: Bearer $MATTERMOST_BOT_ACCESS_TOKEN" $MATTERMOST_POST_API_URL
    depends_on:
        - Push to registry
    when:
        - status: [success]

  - name: Send Push to Registry Status Notification (failure)
    image: curlimages/curl
    environment:
        MATTERMOST_BOT_ACCESS_TOKEN:
            from_secret: mattermost_bot_access_token
        MATTERMOST_CHANNEL_ID:
            from_secret: mattermost_pushes_channel_id
        MATTERMOST_POST_API_URL:
            from_secret: mattermost_post_api_url
    commands:
        - |
            BODY=$(printf '{"channel_id":"%s","message":"[%s - Build #%s] Push to registry failure 💩"}' "$MATTERMOST_CHANNEL_ID" "$CI_REPO" "$CI_PIPELINE_NUMBER")
            curl -sS -X POST -H "Content-Type: application/json" -d "$BODY" -H "Authorization: Bearer $MATTERMOST_BOT_ACCESS_TOKEN" $MATTERMOST_POST_API_URL
    depends_on:
        - Push to registry
    when:
        - status: [failure]