deploy.yml

name: Deploy

on:
  workflow_dispatch:
    inputs:
      env:
        required: true
        type: choice
        options:
          - sirch
  workflow_call:
    inputs:
      env:
        description: Target environment for deployment
        required: true
        type: string

jobs:

  stage:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
      - uses: actions/setup-java@v5
        with:
          distribution: temurin
          java-version: 25
      - name: Setup sbt
        uses: sbt/setup-sbt@v1
      - run: sbt stage
      - uses: actions/upload-artifact@v7
        with:
          name: lila-search-app
          path: modules/app/target/universal/stage
      - uses: actions/upload-artifact@v7
        with:
          name: lila-search-ingestor
          path: modules/ingestor-app/target/universal/stage
      - uses: actions/upload-artifact@v7
        with:
          name: lila-search-cli
          path: modules/ingestor-cli/target/universal/stage

  deploy-components:
    runs-on: ubuntu-latest
    needs: stage
    environment:
      name: ${{ inputs.env }}
    strategy:
      fail-fast: false
      max-parallel: 1
      matrix:
        include:
          - artifact: lila-search-app
            remote_dir: /home/lila-search
            user: lila-search
            restart_cmd: systemctl restart lila-search
          - artifact: lila-search-ingestor
            remote_dir: /home/lila-search-ingestor
            user: lila-search-ingestor
            restart_cmd: systemctl restart lila-search-ingestor
          - artifact: lila-search-cli
            remote_dir: /home/lila-search-cli
            user: ""
            restart_cmd: ""   # no restart needed
    concurrency:
      group: deploy-${{ inputs.env }}
    steps:
      - name: Download artifact
        uses: actions/download-artifact@v8
        with:
          name: ${{ matrix.artifact }}
          path: stage

      - name: Configure SSH
        run: |
          set -euo pipefail
          mkdir -p ~/.ssh
          chmod 700 ~/.ssh
          touch ~/.ssh/id_deploy
          chmod 600 ~/.ssh/id_deploy
          echo "$SSH_KEY" > ~/.ssh/id_deploy
          echo "$SSH_HOST $SSH_HOST_KEY" > ~/.ssh/known_hosts
          cat >>~/.ssh/config <<END
          Host deploy-host
            HostName $SSH_HOST
            User $SSH_USER
            IdentityFile ~/.ssh/id_deploy
            StrictHostKeyChecking yes
          END
        env:
          SSH_KEY: ${{ secrets.SSH_KEY }}
          SSH_HOST: ${{ secrets.SSH_HOST }}
          SSH_USER: ${{ secrets.SSH_USER }}
          SSH_HOST_KEY: ${{ secrets.SSH_HOST_KEY }}

      - name: Deploy via SSH
        run: |
          set -euo pipefail
          if [ ! -d stage/bin ]; then
            echo "ERROR: Expected staged artifact (stage/bin) not found. You skipped build jobs via workflow_dispatch."
            echo "Either (a) run a normal CI build first, or (b) modify deploy job to build artifacts."
            exit 1
          fi
          RSYNC_OPTIONS="--archive --no-o --no-g --force --delete --progress --compress --checksum --verbose --exclude RUNNING_PID --exclude '.git/'"
          include="stage/bin stage/lib"
          echo "Deploying ${{ matrix.artifact }} to ${{ matrix.remote_dir }}"
          rsync $RSYNC_OPTIONS $include deploy-host:${{ matrix.remote_dir }}
          echo "rsync complete (${{ matrix.artifact }})"

          if [ -n "${{ matrix.restart_cmd }}" ]; then
            echo "run restart: ${{ matrix.restart_cmd }}"
            ssh deploy-host "chmod +x ${{ matrix.remote_dir }}/bin/${{ matrix.artifact }} && chown -R ${{ matrix.user }}:${{ matrix.user }} ${{ matrix.remote_dir }} && ${{ matrix.restart_cmd }}"
          else
            echo "No restart command defined for ${{ matrix.artifact }}."
          fi

          echo "Deploy complete (${{ matrix.artifact }})"