deploy-production.yml

# reference:
#   1. https://github.com/docker/build-push-action/blob/master/docs/advanced/push-multi-registries.md
#   2. https://github.com/docker/build-push-action/blob/master/docs/advanced/share-image-jobs.md
#   3. https://github.com/marketplace/actions/unregistry-docker-push-action

name: Deploy to Production environment
on:
  push:
    tags:
      - v*
env:
  BOX_NAME: kys-ows
  BOX_URL: kaiyuanshe/kys-ows
  DOCKER_BUILD_SUMMARY: false
  DOCKER_BUILD_RECORD_UPLOAD: false

jobs:
  deploy_docker_image:
    name: Deploy Docker image
    runs-on: ubuntu-latest
    permissions:
      packages: write
      contents: read
    steps:
      - uses: actions/checkout@v4
        with:
          submodules: recursive
          lfs: true
      - run: git submodule update --remote

      - name: Inject Environment variables
        run: |
          cat >> .npmrc <<EOF
          //npm.pkg.github.com/:_authToken=${{ secrets.NPM_TOKEN }}
          @kaiyuanshe:registry=https://npm.pkg.github.com
          always-auth=true
          EOF
          cat > .env.local <<EOF
          ${{ secrets.ENV_FILE }}
          VERCEL_URL=kaiyuanshe.cn
          EOF

      - uses: docker/setup-qemu-action@v3
      - uses: docker/setup-buildx-action@v3

      - name: Build Image
        uses: docker/build-push-action@v6
        with:
          context: .
          platforms: linux/amd64
          tags: ${{ env.BOX_URL }}:latest
          load: true # Load image to local Docker daemon for unregistry
          # use cache from GitHub Actions
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Add server to known hosts
        run: ssh-keyscan -H ${{ secrets.HOST }} >> ~/.ssh/known_hosts

      - name: Deploy Docker image to server
        uses: SonOfBytes/unregistry-action@v0.1.0
        with:
          image: ${{ env.BOX_URL }}:latest
          destination: ${{ secrets.USER }}@${{ secrets.HOST }}
          ssh_key: ${{ secrets.SSH_KEY }}

      - name: Deploy Docker Compose and start services
        uses: garygrossgarten/github-action-ssh@release
        with:
          host: ${{ secrets.HOST }}
          username: ${{ secrets.USER }}
          password: ${{ secrets.SSH_KEY }}
          command: |
            mkdir -p ~/${{ env.BOX_NAME }}
            cd ~/${{ env.BOX_NAME }}
            
            # Check if docker-compose.yml exists
            if [ ! -f docker-compose.yml ]; then
              echo "Error: docker-compose.yml not found in ~/${{ env.BOX_NAME }}"
              echo "Please create a docker-compose.yml file before deployment"
              exit 1
            fi

            # Stop existing containers and start new ones
            docker-compose down -v --remove-orphans
            docker-compose up -d

            # Clean up unused images
            docker image prune -a -f