# Build et push de l'image Docker à chaque push sur main (→ :latest)
# et à chaque tag vX.Y.Z (→ :X.Y.Z + :latest).
# Secrets requis (Dépôt → Réglages → Actions → Secrets) :
#   GHCR_USERNAME, GHCR_TOKEN    — compte GitHub avec droits paquet ghcr.io/aulyriusohm/ohm-streaming
#   REGISTRY_TOKEN               — token Gitea avec droits paquet (push git.lanro.eu/roman/ohm_streaming)
name: docker

on:
  push:
    branches: [main]
    tags: ['v*.*.*']

jobs:
  build-push:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        run: git clone --depth 1 --branch "$GITHUB_REF_NAME" "$GITHUB_SERVER_URL/$GITHUB_REPOSITORY.git" .

      - name: Version
        id: v
        run: |
          if [[ "$GITHUB_REF_TYPE" == "tag" ]]; then
            v="${GITHUB_REF_NAME#v}"
          else
            v=$(sed -n 's/^version = "\(.*\)"/\1/p' pyproject.toml)
          fi
          [[ "$v" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]] || { echo "✖ version invalide : $v"; exit 1; }
          echo "version=$v" >> "$GITHUB_OUTPUT"
          echo "▶ Version : $v"

      - name: Build
        env:
          V: ${{ steps.v.outputs.version }}
        run: |
          docker build --build-arg VERSION="$V" \
            -t ghcr.io/aulyriusohm/ohm-streaming:latest \
            -t git.lanro.eu/roman/ohm_streaming:latest \
            $([[ "$GITHUB_REF_TYPE" == "tag" ]] && echo "-t ghcr.io/aulyriusohm/ohm-streaming:$V -t git.lanro.eu/roman/ohm_streaming:$V") \
            .

      - name: Push GHCR
        env:
          V: ${{ steps.v.outputs.version }}
        run: |
          echo "${{ secrets.GHCR_TOKEN }}" | docker login ghcr.io -u "${{ secrets.GHCR_USERNAME }}" --password-stdin
          docker push ghcr.io/aulyriusohm/ohm-streaming:latest
          [[ "$GITHUB_REF_TYPE" == "tag" ]] && docker push "ghcr.io/aulyriusohm/ohm-streaming:$V"
          docker logout ghcr.io

      - name: Push registre Gitea
        env:
          V: ${{ steps.v.outputs.version }}
        run: |
          echo "${{ secrets.REGISTRY_TOKEN }}" | docker login git.lanro.eu -u Roman --password-stdin
          docker push git.lanro.eu/roman/ohm_streaming:latest
          [[ "$GITHUB_REF_TYPE" == "tag" ]] && docker push "git.lanro.eu/roman/ohm_streaming:$V"
          docker logout git.lanro.eu