name: Deploy to NAS

on:
  push:
    branches: [main]

jobs:
  deploy:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          submodules: recursive

      - name: Write .env
        run: printf 'DB_PASSWORD=%s\n' '${{ secrets.DB_PASSWORD }}' > ${{ secrets.DEPLOY_DIR }}/.env

      - name: Build & Deploy
        run: |
          cp -r ${{ github.workspace }}/. ${{ secrets.DEPLOY_DIR }}/
          docker compose -f ${{ secrets.DEPLOY_DIR }}/docker-compose.yml up --build -d

      - name: Health check
        run: |
          sleep 15
          curl -sf http://localhost:9050/healthz || exit 1