name: Build & push image

# Builds the Gadfly reviewer container and pushes it to the Gitea container
# registry. Tag a release (v1, v1.2.0, …) to publish that version + :latest.
#
# Required repo secrets:
#   REGISTRY_USER / REGISTRY_PASSWORD  Gitea creds with registry push + read
#                                      access to the private majordomo module.

on:
  push:
    tags: ["v*"]
  workflow_dispatch: {}

env:
  IMAGE: gitea.stevedudenhoeffer.com/steve/gadfly

jobs:
  image:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Log in to the registry
        run: |
          echo "${{ secrets.REGISTRY_PASSWORD }}" \
            | docker login gitea.stevedudenhoeffer.com -u "${{ secrets.REGISTRY_USER }}" --password-stdin

      - name: Resolve tags
        id: tags
        run: |
          if [ "${{ github.ref_type }}" = "tag" ]; then
            echo "version=${{ github.ref_name }}" >> "$GITHUB_OUTPUT"
          else
            echo "version=dev-$(echo ${{ github.sha }} | cut -c1-8)" >> "$GITHUB_OUTPUT"
          fi

      - name: Build & push
        run: |
          docker build \
            --build-arg GIT_USER="${{ secrets.REGISTRY_USER }}" \
            --build-arg GIT_TOKEN="${{ secrets.REGISTRY_PASSWORD }}" \
            -t "${IMAGE}:${{ steps.tags.outputs.version }}" \
            -t "${IMAGE}:latest" \
            .
          docker push "${IMAGE}:${{ steps.tags.outputs.version }}"
          docker push "${IMAGE}:latest"