prod.yml

name: Build Prod Image and Deploy to Heroku

on: 
  push:
    branches:
      - main
    paths:
      - 'project/app/**'
      - 'project/migrations/**'
      - 'project/pyproject.toml'
      - 'project/pdm.lock'
      - 'project/docker/prod.Dockerfile'
      - '.github/workflows/prod.yml'
      
env:
  MODE: prod
  IMAGE: ghcr.io/${{ github.repository }}/prod-image

jobs:
  publish:
    name: Publish Production Docker Image
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        id: checkout-repo
        uses: actions/checkout@v4

      - name: Log in to github container registry
        id: login-ghcr
        run: echo "${GH_PAT}" | docker login ghcr.io -u "${{ github.actor }}" --password-stdin
        env:
          GH_PAT: ${{ secrets.GH_PAT }}

      - name: Pull existing docker image
        id: pull-existing-docker-image
        run: |
          docker pull ${{ env.IMAGE }}:latest || true

      - name: Build docker image
        id: build-docker-image
        run: |
          docker build \
            --cache-from ${{ env.IMAGE }}:latest \
            --tag ${{ env.IMAGE }}:latest \
            --file ./project/docker/${{ env.MODE }}.Dockerfile \
            ./project

      - name: Push docker image to github container registry
        id: push-docker-image
        run: |
          docker push ${{ env.IMAGE }}:latest

  deploy:
    name: Deploy to heroku
    runs-on: ubuntu-latest
    needs: [publish]
    env:
      HEROKU_APP_NAME: ${{ secrets.HEROKU_APP_NAME }}
      HEROKU_REGISTRY_IMAGE: registry.heroku.com/${{ secrets.HEROKU_APP_NAME }}/web

    steps:
      - name: Checkout repository
        id: checkout-repo
        uses: actions/checkout@v4

      - name: Log in to github container registry
        id: login-ghcr
        run: echo "${GH_PAT}" | docker login ghcr.io -u "${{ github.actor }}" --password-stdin
        env:
          GH_PAT: ${{ secrets.GH_PAT }}

      - name: Pull docker image from github registry
        id: pull-docker-image-from-ghcr
        run: docker pull ${{ env.IMAGE }}:latest || true

      - name: Build heroku docker image
        id: build-heroku-docker-image
        run: |
          docker build \
            --cache-from ${{ env.IMAGE }}:latest \
            --tag ${{ env.HEROKU_REGISTRY_IMAGE }}:latest \
            --file ./project/docker/prod.Dockerfile \
            ./project

      - name: Log in and push docker image to heroku registry
        id: login-and-push-heroku-registry
        run: |
          echo ${HEROKU_AUTH_TOKEN} | docker login --username=_ --password-stdin registry.heroku.com
          docker push ${{ env.HEROKU_REGISTRY_IMAGE }}
        env:
          HEROKU_AUTH_TOKEN: ${{ secrets.HEROKU_AUTH_TOKEN }}

      - name: Set environment variables to be used in release step
        id: set-heroku-env-vars
        run: |
          echo "HEROKU_REGISTRY_IMAGE=${{ env.HEROKU_REGISTRY_IMAGE }}" >> $GITHUB_ENV
          echo "::add-mask::${{ secrets.HEROKU_AUTH_TOKEN }}"  
          echo "HEROKU_AUTH_TOKEN=${{ secrets.HEROKU_AUTH_TOKEN }}" >> $GITHUB_ENV

      - name: Release heroku app
        id: release-heroku-app
        run: |
          chmod +x ./project/scripts/release.sh
          ./project/scripts/release.sh