docker-publish.yml

name: Docker

on:
  push:
    # Publish `develop` as Docker `latest` image.
    branches:
      - develop
      - main

    # Publish `v1.2.3` tags as releases.
    tags:
      - v*

  # Run tests for any PRs.
  pull_request:

env:
  # TODO: Change variable to your image's name.
  IMAGE_NAME: tld-botto

jobs:
  # Run tests.
  # See also https://docs.docker.com/docker-hub/builds/automated-testing/
  test:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v2

      - name: Set up Python 3.9
        uses: actions/setup-python@v1
        with:
          python-version: 3.9

      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r requirements.txt

      - name: Run tests
        run: pytest -vv

      - name: Load docker image from cache
        id: cache-docker
        uses: actions/cache@v1
        with:
          path: /tmp/docker-save
          key: docker-save-tld-${{ hashFiles('Dockerfile') }}

      - name: Load cached image into Docker
        run: docker load -i /tmp/docker-save/snapshot.tar || true
        if: steps.cache-docker.outputs.cache-hit == 'true'

      - name: Build docker image
        run: docker build . -t $IMAGE_NAME --cache-from=tld-botto-cache

      - name: Save cache of Docker image
        run: >
          docker tag $IMAGE_NAME tld-botto-cache &&
          mkdir -p /tmp/docker-save &&
          docker save tld-botto-cache -o /tmp/docker-save/snapshot.tar &&
          ls -lh /tmp/docker-save || true
        if: always() && steps.cache-docker.outputs.cache-hit != 'true'

  # Push image to GitHub Packages.
  # See also https://docs.docker.com/docker-hub/builds/
  push:
    # Ensure test job passes before pushing image.
    needs: test

    concurrency: Tildy

    runs-on: ubuntu-latest
    if: github.event_name == 'push' || github.event_name == 'workflow_run'

    permissions:
      contents: read
      packages: write

    steps:
      - name: Checkout code
        uses: actions/checkout@v2
        
      - name: Load docker image from cache
        id: cache-docker
        uses: actions/cache@v1
        with:
          path: /tmp/docker-save
          key: docker-save-tld-${{ hashFiles('Dockerfile') }}

      - name: Load cached image into Docker
        run: docker load -i /tmp/docker-save/snapshot.tar || true
        if: steps.cache-docker.outputs.cache-hit == 'true'

      - name: Build image
        run: docker build . --file Dockerfile --tag $IMAGE_NAME --cache-from=tld-botto-cache

      - name: Log into registry
        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin

      - name: Push image
        run: |
          IMAGE_ID=ghcr.io/Lovely-Development-Team/$IMAGE_NAME

          # Change all uppercase to lowercase
          IMAGE_ID=$(echo $IMAGE_ID | tr '[A-Z]' '[a-z]')

          # Strip git ref prefix from version
          VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')

          # Strip "v" prefix from tag name
          [[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//')

          # Use Docker `latest` tag convention
          [ "$VERSION" == "main" ]  && VERSION=latest

          echo IMAGE_ID=$IMAGE_ID
          echo VERSION=$VERSION

          docker tag $IMAGE_NAME $IMAGE_ID:$VERSION
          docker push $IMAGE_ID:$VERSION

  deploy:
    # Ensure test job passes before pushing image.
    needs: push

    concurrency: Tildy

    runs-on: ubuntu-latest
    if: github.event_name == 'push' || github.event_name == 'workflow_run'

    permissions:
      contents: read
      packages: read

    steps:
      - name: Checkout code
        uses: actions/checkout@v2
        with:
          fetch-depth: 0

      - name: Set env
        run: echo "RELEASE_VERSION=`git describe --tags`" >> $GITHUB_ENV
        continue-on-error: true

      - name: Start Tildy
        uses: appleboy/ssh-action@v0.1.4
        env:
          HOST: ${{ secrets.DEPLOY_HOST }}
          USERNAME: ${{ secrets.DEPLOY_USERNAME }}
          PASSPHRASE: ${{ secrets.DEPLOY_SSHKEY_PASSPHRASE }}
          KEY: ${{ secrets.DEPLOY_SSHKEY }}
          SCRIPT: >
            docker pull ghcr.io/lovely-development-team/tld-botto:latest &&
            docker stop tld_botto || true &&
            docker rm tld_botto || true &&
            docker run -d -t --restart unless-stopped
            -e TLDBOTTO_DISCORD_TOKEN='${{ secrets.DISCORD_TOKEN }}'
            -e TLDBOTTO_AIRTABLE_BASE='${{ secrets.AIRTABLE_BASE }}'
            -e TLDBOTTO_AIRTABLE_KEY='${{ secrets.AIRTABLE_KEY }}'
            -e TLDBOTTO_MEMBERS_VOTE_NOT_REQUIRED='${{ secrets.MEMBERS_VOTE_NOT_REQUIRED }}'
            -e TLDBOTTO_TIMEZONES='${{ secrets.TIMEZONES }}'
            -e TLDBOTTO_MEAL_CONFIG='${{ secrets.MEAL_CONFIG }}'
            -e TLDBOTTO_ID='Capys-hosted TLDBotto'
            -e TLDBOTTO_VERSION='${{ env.RELEASE_VERSION }}'
            --name tld_botto ghcr.io/lovely-development-team/tld-botto:latest