name: Deploy to Ubuntu Server

on:
  push:
    branches:
      - main

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Setup SSH key
        uses: webfactory/ssh-agent@v0.9.0
        with:
          ssh-private-key: ${{ secrets.NAS_SSH_KEY_ADMIN }}

      - name: Deploy via SSH
        env:
          HOST: ${{ secrets.NAS_HOST }}
          PORT: ${{ secrets.NAS_PORT }}
          USER: ${{ secrets.NAS_USER }}
        run: |
          ssh -o StrictHostKeyChecking=no -p $PORT $USER@$HOST << 'EOF'
            sudo -n mkdir -p /opt/robeing-nginx
            
            if [ -d "/opt/robeing-nginx/.git" ]; then
              cd /opt/robeing-nginx && git pull origin main
            else
              git clone https://github.com/ivada-Robeing/nginx-deploy.git /opt/robeing-nginx
              cd /opt/robeing-nginx
            fi
            
            sudo -n mkdir -p ssl certbot-webroot
            sudo -n docker-compose down || true
            sudo -n docker-compose up -d
          EOF