deploy.yml

name: Deploy
on:
  push:
    branches:
      - main
permissions:
  contents: read
  packages: write
concurrency:
  group: web
jobs:
  deploy:
    name: Deploy
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      - name: Install pnpm
        uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0
        with:
          version: 10
      - name: Install Node.js
        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          node-version: 24
          cache: pnpm
      - name: Install build dependencies
        run: pnpm install --production
      - name: Compile Markdown
        run: pnpm build
      - name: Build Docker image
        run: docker build -t ghcr.io/hplush/hplush.dev:latest .
      - name: Login to GitHub Container Registry
        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Push Docker image
        run: docker push ghcr.io/hplush/hplush.dev:latest
      - name: Trigger Dokploy Deployment
        run: |
          curl --fail ${{ secrets.DOKPLOY_DEPLOY_URL }}
      - name: Clean previous images
        uses: dataaxiom/ghcr-cleanup-action@cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4 # v1.0.16
        with:
          package: hplush.dev
          owner: hplush
          delete-untagged: true
          token: ${{ secrets.GITHUB_TOKEN }}