name: Build & Deploy MB Grid Solutions

on:
  push:
    branches: [main]

jobs:
  build-and-deploy:
    # ────────────────────────────────────────────────
    # WICHTIG: Kein "docker" mehr – sondern eines der neuen Labels
    runs-on: docker

    steps:
      # ═══════════════════════════════════════════════════════════════════════════════
      # LOGGING: Workflow Start - Full Transparency
      # ═══════════════════════════════════════════════════════════════════════════════
      - name: 📋 Log Workflow Start
        run: |
          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
          echo "║ MB Grid Solutions Deployment Workflow Started                               ║"
          echo "╚══════════════════════════════════════════════════════════════════════════════╝"
          echo ""
          echo "📋 Workflow Information:"
          echo "  • Repository: ${{ github.repository }}"
          echo "  • Branch: ${{ github.ref }}"
          echo "  • Commit: ${{ github.sha }}"
          echo "  • Actor: ${{ github.actor }}"
          echo "  • Run ID: ${{ github.run_id }}"
          echo "  • Timestamp: $(date -u +'%Y-%m-%d %H:%M:%S UTC')"
          echo ""
          echo "🔍 Environment Details:"
          echo "  • Runner OS: ${{ runner.os }}"
          echo "  • Workspace: ${{ github.workspace }}"
          echo ""

      - name: Checkout repository
        uses: actions/checkout@v4

      # ═══════════════════════════════════════════════════════════════════════════════
      # LOGGING: Registry Login Phase
      # ═══════════════════════════════════════════════════════════════════════════════
      - name: 🔐 Login to private registry
        run: |
          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
          echo "║ Step: Registry Login                                                         ║"
          echo "╚══════════════════════════════════════════════════════════════════════════════╝"
          echo ""
          echo "🔐 Authenticating with private registry..."
          echo "  Registry: registry.infra.mintel.me"
          echo "  User: ${{ secrets.REGISTRY_USER != '' && '***' || 'NOT SET' }}"
          echo ""
          
          # Execute login with error handling
          if echo "${{ secrets.REGISTRY_PASS }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin 2>&1; then
            echo "✅ Registry login successful"
          else
            echo "❌ Registry login failed"
            exit 1
          fi
          echo ""

      # ═══════════════════════════════════════════════════════════════════════════════
      # LOGGING: Build Phase
      # ═══════════════════════════════════════════════════════════════════════════════
      - name: 🏗️ Build Docker image
        run: |
          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
          echo "║ Step: Build Docker Image                                                     ║"
          echo "╚══════════════════════════════════════════════════════════════════════════════╝"
          echo ""
          echo "🏗️ Building Docker image with buildx..."
          echo "  Platform: linux/arm64"
          echo "  Target: registry.infra.mintel.me/mintel/mb-grid-solutions:latest"
          echo ""
          echo "⏱️ Build started at: $(date -u +'%Y-%m-%d %H:%M:%S UTC')"
          echo ""
          
          # Execute build with detailed logging
          set -e
          docker buildx build \
            --pull \
            --platform linux/arm64 \
            --build-arg NEXT_PUBLIC_BASE_URL="${{ secrets.NEXT_PUBLIC_BASE_URL }}" \
            --build-arg NEXT_PUBLIC_UMAMI_WEBSITE_ID="${{ secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}" \
            --build-arg NEXT_PUBLIC_UMAMI_SCRIPT_URL="${{ secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL }}" \
            -t registry.infra.mintel.me/mintel/mb-grid-solutions:latest \
            --push .
          
          BUILD_EXIT_CODE=$?
          if [ $BUILD_EXIT_CODE -eq 0 ]; then
            echo ""
            echo "✅ Build completed successfully at: $(date -u +'%Y-%m-%d %H:%M:%S UTC')"
            echo ""
            echo "📊 Image Details:"
            IMAGE_SIZE=$(docker inspect registry.infra.mintel.me/mintel/mb-grid-solutions:latest --format='{{.Size}}')
            IMAGE_SIZE_MB=$((IMAGE_SIZE / 1024 / 1024))
            echo "  • Size: ${IMAGE_SIZE_MB}MB"
            docker inspect registry.infra.mintel.me/mintel/mb-grid-solutions:latest --format='  • Created: {{.Created}}'
            docker inspect registry.infra.mintel.me/mintel/mb-grid-solutions:latest --format='  • Architecture: {{.Architecture}}'
          else
            echo ""
            echo "❌ Build failed with exit code: $BUILD_EXIT_CODE"
            exit $BUILD_EXIT_CODE
          fi
          echo ""

      # ═══════════════════════════════════════════════════════════════════════════════
      # LOGGING: Deployment Phase
      # ═══════════════════════════════════════════════════════════════════════════════
      - name: 🚀 Deploy to production server
        run: |
          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
          echo "║ Step: Deploy to Production Server                                            ║"
          echo "╚══════════════════════════════════════════════════════════════════════════════╝"
          echo ""
          echo "🚀 Starting deployment process..."
          echo "  Target Server: alpha.mintel.me"
          echo "  Deploy User: deploy (via sudo from root)"
          echo "  Target Path: /home/deploy/sites/mb-grid-solutions.com"
          echo ""
          
          # Setup SSH with logging
          echo "🔐 Setting up SSH connection..."
          mkdir -p ~/.ssh
          echo "${{ secrets.ALPHA_SSH_KEY }}" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          
          echo "🔑 Adding host to known_hosts..."
          ssh-keyscan -H alpha.mintel.me >> ~/.ssh/known_hosts 2>/dev/null
          if [ $? -eq 0 ]; then
            echo "✅ Host key added successfully"
          else
            echo "⚠️ Warning: Could not add host key"
          fi
          echo ""
          
          # Sync docker-compose.yaml first
          echo "📦 Syncing docker-compose.yaml..."
          tar czf - docker-compose.yaml | \
          ssh -o StrictHostKeyChecking=accept-new \
              -o IPQoS=0x00 \
              root@alpha.mintel.me \
              "mkdir -p /home/deploy/sites/mb-grid-solutions.com/ && tar xzf - -C /home/deploy/sites/mb-grid-solutions.com/ && chown -R deploy:deploy /home/deploy/sites/mb-grid-solutions.com/"
          
          if [ $? -eq 0 ]; then
            echo "✅ Files synced successfully"
          else
            echo "❌ File sync failed"
            exit 1
          fi
          echo ""

          # Execute deployment commands with detailed logging
          echo "📡 Connecting to server and executing deployment commands..."
          echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
          echo ""
          
          # SSH as root and use sudo to run deployment script as deploy user
          # This works around the broken SSH output issue with deploy user
          ssh -o StrictHostKeyChecking=accept-new \
              -o ServerAliveInterval=30 \
              -o ServerAliveCountMax=3 \
              -o ConnectTimeout=10 \
              root@alpha.mintel.me \
              "CONTACT_RECIPIENT='${{ secrets.CONTACT_RECIPIENT }}' \
               SMTP_FROM='${{ secrets.SMTP_FROM }}' \
               SMTP_HOST='${{ secrets.SMTP_HOST }}' \
               SMTP_PASS='${{ secrets.SMTP_PASS }}' \
               SMTP_PORT='${{ secrets.SMTP_PORT }}' \
               SMTP_SECURE='${{ secrets.SMTP_SECURE }}' \
               SMTP_USER='${{ secrets.SMTP_USER }}' \
               NEXT_PUBLIC_BASE_URL='${{ secrets.NEXT_PUBLIC_BASE_URL }}' \
               NEXT_PUBLIC_UMAMI_WEBSITE_ID='${{ secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}' \
               NEXT_PUBLIC_UMAMI_SCRIPT_URL='${{ secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL }}' \
               SENTRY_DSN='${{ secrets.SENTRY_DSN }}' \
               SITE_NAME='mb-grid-solutions.com' \
               sudo -u deploy -E HOME=/home/deploy /home/deploy/deploy.sh --zero-downtime"
          
          DEPLOY_EXIT_CODE=$?
          echo ""
          
          if [ $DEPLOY_EXIT_CODE -eq 0 ]; then
            echo "✅ Deployment completed successfully at: $(date -u +'%Y-%m-%d %H:%M:%S UTC')"
          else
            echo "❌ Deployment failed with exit code: $DEPLOY_EXIT_CODE"
            echo ""
            echo "🔍 Troubleshooting Tips:"
            echo "  • Check server connectivity: ping alpha.mintel.me"
            echo "  • Verify SSH key permissions on server"
            echo "  • Check disk space on target server"
            echo "  • Review docker compose configuration"
            echo "  • Ensure /home/deploy/deploy.sh exists and is executable"
            exit $DEPLOY_EXIT_CODE
          fi
          echo ""

      # ═══════════════════════════════════════════════════════════════════════════════
      # LOGGING: Workflow Summary
      # ═══════════════════════════════════════════════════════════════════════════════
      - name: 📊 Workflow Summary
        if: always()
        run: |
          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
          echo "║ Workflow Summary                                                             ║"
          echo "╚══════════════════════════════════════════════════════════════════════════════╝"
          echo ""
          echo "📊 Final Status:"
          echo "  • Workflow: ${{ job.status }}"
          echo "  • Completed: $(date -u +'%Y-%m-%d %H:%M:%S UTC')"
          echo ""
          echo "🎯 Deployment Target:"
          echo "  • Image: registry.infra.mintel.me/mintel/mb-grid-solutions:latest"
          echo "  • Server: alpha.mintel.me"
          echo "  • Service: mb-grid-solutions.com"
          echo ""
          echo "🔐 Security Notes:"
          echo "  • All secrets are masked (*** ) in logs"
          echo "  • SSH keys are created with 600 permissions"
          echo "  • Passwords are never displayed in plain text"
          echo ""
          echo "╔══════════════════════════════════════════════════════════════════════════════╗"
          if [ "${{ job.status }}" == "success" ]; then
            echo "║ ✅ DEPLOYMENT SUCCESSFUL                                                     ║"
          else
            echo "║ ❌ DEPLOYMENT FAILED                                                         ║"
          fi
          echo "╚══════════════════════════════════════════════════════════════════════════════╝"

      # ═══════════════════════════════════════════════════════════════════════════════
      # NOTIFICATION: Gotify
      # ═══════════════════════════════════════════════════════════════════════════════
      - name: 🔔 Gotify Notification (Success)
        if: success()
        run: |
          echo "Sending success notification to Gotify..."
          RESPONSE=$(curl -k -s -w "\n%{http_code}" -X POST "${{ secrets.GOTIFY_URL }}/message?token=${{ secrets.GOTIFY_TOKEN }}" \
            -F "title=✅ Deployment Success: ${{ github.repository }}" \
            -F "message=The deployment of ${{ github.repository }} (branch: ${{ github.ref }}) was successful.
            
            Commit: ${{ github.sha }}
            Actor: ${{ github.actor }}
            Run ID: ${{ github.run_id }}" \
            -F "priority=5")
          
          HTTP_CODE=$(echo "$RESPONSE" | tail -n1)
          BODY=$(echo "$RESPONSE" | sed '$d')
          
          echo "HTTP Status: $HTTP_CODE"
          echo "Response Body: $BODY"
          
          if [ "$HTTP_CODE" -lt 200 ] || [ "$HTTP_CODE" -ge 300 ]; then
            echo "Failed to send Gotify notification"
            exit 0 # Don't fail the workflow because of notification failure
          fi

      - name: 🔔 Gotify Notification (Failure)
        if: failure()
        run: |
          echo "Sending failure notification to Gotify..."
          RESPONSE=$(curl -k -s -w "\n%{http_code}" -X POST "${{ secrets.GOTIFY_URL }}/message?token=${{ secrets.GOTIFY_TOKEN }}" \
            -F "title=❌ Deployment Failed: ${{ github.repository }}" \
            -F "message=The deployment of ${{ github.repository }} (branch: ${{ github.ref }}) failed!
            
            Commit: ${{ github.sha }}
            Actor: ${{ github.actor }}
            Run ID: ${{ github.run_id }}
            
            Please check the logs for details." \
            -F "priority=8")
          
          HTTP_CODE=$(echo "$RESPONSE" | tail -n1)
          BODY=$(echo "$RESPONSE" | sed '$d')
          
          echo "HTTP Status: $HTTP_CODE"
          echo "Response Body: $BODY"
          
          if [ "$HTTP_CODE" -lt 200 ] || [ "$HTTP_CODE" -ge 300 ]; then
            echo "Failed to send Gotify notification"
            exit 0 # Don't fail the workflow because of notification failure
          fi