name: Generic zig build
on:
  workflow_dispatch:
  push:
    branches:
      - '*'
env:
  BUILD_TARGET: x86_64-linux-musl
  BUILD_OPTIMIZATION: ReleaseSafe
  BINARY_NAME: zfin-vestwell
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Check out repository code
        uses: actions/checkout@v4
      - name: Setup Zig
        uses: https://codeberg.org/mlugg/setup-zig@v2.2.1
      # Needs network: build.zig.zon pins srf and zfin at git.lerch.org, and
      # `zig build` resolves them here. The Docker build itself needs none.
      - name: Build project
        run: zig build --summary all
      # Gates the image: `deploy` has `needs: build`, so a test failure means
      # nothing is published.
      - name: Run tests
        run: zig build test --summary all
      # Static musl is what makes the `FROM scratch` runtime image possible.
      - name: Package
        run: zig build -Dtarget="$BUILD_TARGET" -Doptimize="$BUILD_OPTIMIZATION"
      - name: Upload
        uses: actions/upload-artifact@v3
        with:
          name: ${{ env.BINARY_NAME }}
          path: zig-out/bin/${{ env.BINARY_NAME }}
      - name: Notify
        uses: https://git.lerch.org/lobo/action-notify-ntfy@v2
        if: always() && env.GITEA_ACTIONS == 'true'
        with:
          host: ${{ secrets.NTFY_HOST }}
          topic: ${{ secrets.NTFY_TOPIC }}
          status: ${{ job.status }}
          user: ${{ secrets.NTFY_USER }}
          password: ${{ secrets.NTFY_PASSWORD }}
  deploy:
    runs-on: ubuntu-latest
    container:
      image: ghcr.io/catthehacker/ubuntu:act-22.04
    needs: build
    steps:
      - name: Check out repository code
        uses: actions/checkout@v4
      - name: Download Artifact
        uses: actions/download-artifact@v3
        with:
          name: ${{ env.BINARY_NAME }}
      # The artifact lands beside the Dockerfile because the image build uses
      # `context: docker` -- nothing outside that directory is visible to it.
      - name: "Make executable actually executable"
        run: chmod 755 ${{ env.BINARY_NAME }} && mv ${{ env.BINARY_NAME }} docker
      - name: Get short ref
        id: vars
        run: echo "shortsha=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
      - name: Login to Gitea
        uses: docker/login-action@v2
        with:
          registry: git.lerch.org
          username: ${{ github.actor }}
          password: ${{ secrets.PACKAGE_PUSH }}
      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          context: docker
          push: true
          tags: |
            git.lerch.org/${{ github.repository }}:${{ steps.vars.outputs.shortsha }}
            git.lerch.org/${{ github.repository }}:latest
      # The Cronicle event pins an immutable tag rather than tracking `:latest`,
      # because `:latest` moves on a push to any branch. Print the tag so it can
      # be copied out of the run log when deploying.
      - name: Deployable tag
        run: |
          echo "::notice::deploy tag git.lerch.org/${{ github.repository }}:${{ steps.vars.outputs.shortsha }}"
          echo "git.lerch.org/${{ github.repository }}:${{ steps.vars.outputs.shortsha }}"
      - name: Notify
        uses: https://git.lerch.org/lobo/action-notify-ntfy@v2
        if: always()
        with:
          host: ${{ secrets.NTFY_HOST }}
          topic: ${{ secrets.NTFY_TOPIC }}
          status: ${{ job.status }}
          user: ${{ secrets.NTFY_USER }}
          password: ${{ secrets.NTFY_PASSWORD }}