name: Deploy With Mrsk

on:
  push:
    branches:
      - main

jobs:
  deploy:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v2

      - name: Install SSH Key To Server
        uses: shimataro/ssh-key-action@v2
        with:
          key: $
          name: github-actions
          known_hosts: 'random-placeholder-value-replaced-by-keyscan-below'
          config: |
            host abc.host(需要更新为自己的 host)
              IdentityFile ~/.ssh/github-actions
              IdentitiesOnly yes
              ForwardAgent yes

      - name: Install Ruby
        uses: ruby/setup-ruby@v1.138.0
        with:
          ruby-version: "3.2.1"

      - name: Setup Node 18
        uses: actions/setup-node@v1
        with:
          node-version: 18.x

      - name: Install Dependencies
        run: |
          sudo apt install -yqq libpq-dev
          gem install bundler
          bundle install --jobs 4 --retry 3

      - name: Create Env File
        run: |
          touch .env
          echo MRSK_REGISTRY_PASSWORD=$ >> .env
          echo RAILS_MASTER_KEY=$ >> .env
          echo SECRET_KEY_BASE=$ >> .env
          echo DATABASE_URL=$ >> .env

      - name: Deploy To Production
        run: |
          eval "$(ssh-agent -s)"
          ssh-add ~/.ssh/github-actions
          bundle exec mrsk version
          bundle exec mrsk lock release
          bundle exec mrsk deploy
          bundle exec mrsk prune all

service: pages

image: pages/rails

labels:
  traefik.enable: true
  traefik.http.routers.hinong.rule: Host(`pages.abc.your.domain`)
  traefik.http.routers.hinong_secure.entrypoints: websecure
  traefik.http.routers.hinong_secure.rule: Host(`pages.abc.your.domain`)
  traefik.http.routers.hinong_secure.tls: true
  traefik.http.routers.hinong_secure.tls.certresolver: letsencrypt

servers:
  web:
    traefik: true
    hosts:
      - ip host

registry:
  server: pages.abc.your.docker.server.com
  username: wen.sprint@gmail.com
  password:
    - MRSK_REGISTRY_PASSWORD

env:
  clear:
    RAILS_ENV: production 
    RAILS_LOG_TO_STDOUT: 1
  secret:
    - RAILS_MASTER_KEY
    - DATABASE_URL

ssh:
  user: root

builder:
  multiarch: false
  dockerfile: Your Dockerfile path

traefik:
  options:
    publish:
      - "443:443"
    volume:
      - "/letsencrypt/acme.json:/letsencrypt/acme.json"
  args:
    accesslog: true
    accesslog.format: json
    providers.docker: true
    api.dashboard: true
    entryPoints.web.address: ":80"
    entryPoints.websecure.address: ":443"
    certificatesResolvers.letsencrypt.acme.email: "wen.sprint@gmail.com"
    certificatesResolvers.letsencrypt.acme.storage: "/letsencrypt/acme.json"
    certificatesResolvers.letsencrypt.acme.httpchallenge: true
    certificatesResolvers.letsencrypt.acme.httpchallenge.entrypoint: web

healthcheck:
  path: /up
  port: 3000
  interval: 30s
  max_attempts: 30