name: Deploy stack su Proxmox

on:
  push:
    branches:
      - master

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      # Sul server DEPLOY_PATH è il clone del repo con il .env di produzione
      # (da .env.prod.example). Il primo deploy (seed Medusa, admin) si fa a mano:
      # vedi "Deploy (produzione)" in CLAUDE.md.
      - name: Deploy via SSH (git pull + docker compose up -d --build)
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.DEPLOY_HOST }}
          port: ${{ secrets.DEPLOY_PORT }}
          username: ${{ secrets.DEPLOY_USER }}
          key: ${{ secrets.DEPLOY_SSH_KEY }}
          command_timeout: 45m
          script: |
            set -e
            cd "${{ secrets.DEPLOY_PATH }}"
            test -f .env || { echo "Manca .env in ${{ secrets.DEPLOY_PATH }} (copiare .env.prod.example)"; exit 1; }
            git fetch origin master
            git reset --hard origin/master
            docker compose -f docker-compose.prod.yml build
            docker compose -f docker-compose.prod.yml up -d --wait --wait-timeout 600 --remove-orphans
            docker image prune -f