ci.yml

name: CI

on:
  push:
    branches: [master]
  workflow_dispatch:

concurrency:
  group: ci
  cancel-in-progress: true

jobs:
  # Deploy when the version changes, not when a file changes.
  #
  # A refactor moves plenty under `src/` and ships nothing anyone asked for.
  # Bumping `version` is an explicit "ship this", so that is the trigger.
  version-check:
    runs-on: ubicloud-standard-2
    outputs:
      changed: ${{ steps.check.outputs.changed }}
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 2
      - id: check
        run: |
          OLD=$(git diff HEAD^ HEAD Cargo.toml | sed -n 's/^-version = "\(.*\)"/\1/p')
          NEW=$(git diff HEAD^ HEAD Cargo.toml | sed -n 's/^+version = "\(.*\)"/\1/p')
          if [ -n "$NEW" ]; then
            echo "$OLD -> $NEW"
            echo "changed=true" >> "$GITHUB_OUTPUT"
          else
            echo "version unchanged, nothing to deploy"
            echo "changed=false" >> "$GITHUB_OUTPUT"
          fi

  fly-deploy:
    needs: version-check
    if: needs.version-check.outputs.changed == 'true'
    runs-on: ubicloud-standard-4
    permissions:
      contents: read

    steps:
      - uses: actions/checkout@v6

      - name: Set version and image
        run: |
          VERSION=$(git rev-parse --short HEAD)
          echo "VERSION=$VERSION" >> $GITHUB_ENV
          echo "FLY_REGISTRY=registry.fly.io" >> $GITHUB_ENV
          echo "FLY_APP=support-cafe-master-fly" >> $GITHUB_ENV

      - name: Cache apt
        uses: ubicloud/cache@v4
        with:
          path: |
            /var/cache/apt/archives/
          key: apt-${{ runner.os }}
          restore-keys: apt-

      - name: Install system dependencies
        run: sudo apt-get install -y musl-dev musl-tools

      - name: Fix apt cache permissions
        run: sudo chmod -R 644 /var/cache/apt/archives/* && sudo chown -R $USER /var/cache/apt/archives

      - name: Setup Rust toolchain
        run: |
          rustup default stable
          rustup target add x86_64-unknown-linux-musl

      - name: Cache cargo registry
        uses: ubicloud/cache@v4
        with:
          path: |
            ~/.cargo/bin
            ~/.cargo/registry/cache
            ~/.cargo/registry/index
            ~/.cargo/git
          key: cargo-registry-1-${{ runner.os }}
          restore-keys: cargo-registry-1-

      - name: Setup cargo sweep
        run: command -v cargo-sweep >/dev/null 2>&1 || cargo install cargo-sweep

      - name: Cache target dependencies
        uses: ubicloud/cache@v4
        with:
          path: |
            /home/runner/target/release/deps
            /home/runner/target/release/.fingerprint
            /home/runner/target/release/build
            /home/runner/target/x86_64-unknown-linux-musl/release/deps
            /home/runner/target/x86_64-unknown-linux-musl/release/.fingerprint
            /home/runner/target/x86_64-unknown-linux-musl/release/build
          key: nf-target-muls-deps2-${{ runner.os }}-${{ hashFiles('**/Cargo.toml') }}-${{ hashFiles('**/rust-toolchain.toml') }}
          restore-keys: |
            nf-target-muls-deps2-${{ runner.os }}

      - name: Build musl amd64 binary
        env:
          CARGO_TARGET_DIR: /home/runner/target
          CARGO_INCREMENTAL: "1"
          WS_SERVER_NAME: SupportCafeServer/${{ github.run_number }}-${{ env.VERSION }}
        run: |
          cargo sweep --stamp
          cargo build --release --target x86_64-unknown-linux-musl --features s3-sync
          cargo sweep --file

      - name: Copy binary into build context
        run: cp /home/runner/target/x86_64-unknown-linux-musl/release/support_cafe ./support_cafe

      - name: Build image with Buildah
        id: build-image
        uses: redhat-actions/buildah-build@v2
        with:
          image: ${{ env.FLY_REGISTRY }}/${{ env.FLY_APP }}
          tags: ${{ env.VERSION }} latest
          base-image: scratch
          content: ./support_cafe
          entrypoint: /support_cafe

      - name: Login to Fly registry
        run: buildah login -u x -p "${{ secrets.FLY_API_TOKEN }}" ${{ env.FLY_REGISTRY }}

      - name: Push image to Fly registry
        run: |
          buildah push --compression-format gzip --remove-signatures ${{ env.FLY_REGISTRY }}/${{ env.FLY_APP }}:${{ env.VERSION }}

      - name: Setup flyctl
        uses: superfly/flyctl-actions/setup-flyctl@v1

      - name: Deploy to Fly
        run: flyctl deploy --config fly.toml --detach --ha=false --image ${{ env.FLY_REGISTRY }}/${{ env.FLY_APP }}:${{ env.VERSION }}
        env:
          FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}