name: build and push

# 当代码推送到 main 分支时触发
on:
  push:
    branches: [ main ]

jobs:
  build-and-push:
    runs-on: ubuntu-latest

    steps:
      - name: 拉取最新代码
        uses: actions/checkout@v4

      - name: 设置 Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: 登录到自己的 Docker 仓库
        uses: docker/login-action@v3
        with:
          registry: ${{ vars.DOCKER_REGISTRY }}
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

     
      - name: 构建并推送镜像
        uses: docker/build-push-action@v5
        with:
          context: .
          push: true
          tags: |
            ${{ vars.DOCKER_REGISTRY }}/${{ vars.DOCKER_IMAGE_NAME }}:latest
            ${{ vars.DOCKER_REGISTRY }}/${{ vars.DOCKER_IMAGE_NAME }}:${{ github.sha }}


      - name: 替换镜像标签为 github.sha
        run: |
          sed -i "s|{{IMAGE_TAG}}|${{ github.sha }}|g" app-product.yml

      - name: 上传 app-product.yml 到前端集群管理机
        uses: appleboy/scp-action@v1
        with:
          host: ${{ vars.SSH_MANAGE }}
          username: ${{ secrets.USERNAME }}
          password: ${{ secrets.PASSWORD }}
          port: ${{ secrets.PORT }}
          source: "app-product.yml" 
          target: ${{ vars.SSH_MANAGE_PATH }}

      - name: 登录前端集群，拉镜像
        uses: appleboy/ssh-action@v1
        with:
          # 统一登录三台前端集群的linux，统一拉取刚推到仓库的最新镜像
          # 解决 Swarm 无法控制 工作机拉取镜像的问题！
          host: ${{ vars.SSH_HOST_LIST }}
          sync: true
          username: ${{ secrets.USERNAME }}
          password: ${{ secrets.PASSWORD }}
          port: ${{ secrets.PORT }}
          script: |
            # 简化版：删除该仓库的所有镜像（无需排除）
            docker images --format "{{.ID}}" ${{ vars.DOCKER_REGISTRY }}/${{ vars.DOCKER_IMAGE_NAME }} | xargs -r docker rmi -f
            # 拉取刚打包的最新镜像
            docker pull ${{ vars.DOCKER_REGISTRY }}/${{ vars.DOCKER_IMAGE_NAME }}:${{ github.sha }}

      - name: 管理节点部署到 Swarm
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ vars.SSH_MANAGE }}
          sync: true
          username: ${{ secrets.USERNAME }}
          password: ${{ secrets.PASSWORD }}
          port: ${{ secrets.PORT }}
          script: |
            # 切换到管理员，要不然没权限在服务器执行 docker 命令，部署到 Swarm 集群 
            sudo docker stack deploy -c ${{ vars.SSH_MANAGE_PATH }}/app-product.yml ${{ vars.DOCKER_IMAGE_NAME }}