name: 🐳 Build Ansible Act Runner Image

on:
  push:
    branches:
      - main
    paths:
      - 'docker/Dockerfile'
  workflow_dispatch:
    inputs:
      force_rebuild:
        description: 'Force rebuild without cache'
        required: false
        default: 'false'
        type: boolean

jobs:
  build:
    # Runs in our custom ubuntu-act-runner image (Node 20 + Docker CLI + git)
    # Docker daemon is the DinD sidecar via DOCKER_HOST=tcp://localhost:2376
    runs-on: ubuntu-latest

    steps:
      - name: 🔎 Checkout
        uses: actions/checkout@v4

      - name: 🏷️ Set Image Tags
        id: tags
        run: |
          REGISTRY="gitea.mod.home"
          ORG="${{ gitea.repository_owner }}"
          IMAGE="ansible-act-runner"
          SHORT_SHA="${{ gitea.sha }}"
          SHORT_SHA="${SHORT_SHA:0:8}"

          echo "tag_latest=${REGISTRY}/${ORG}/${IMAGE}:latest" >> $GITHUB_OUTPUT
          echo "tag_sha=${REGISTRY}/${ORG}/${IMAGE}:${SHORT_SHA}" >> $GITHUB_OUTPUT
          echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT

      - name: 🐳 Docker Login → Gitea Registry
        run: |
          echo "${{ secrets.REGISTRY_PASSWORD }}" | \
            docker login gitea.mod.home \
              --username "${{ secrets.REGISTRY_USER }}" \
              --password-stdin

      - name: 🐳 Build Image
        run: |
          BUILD_ARGS=""
          if [ "${{ inputs.force_rebuild }}" = "true" ]; then
            BUILD_ARGS="--no-cache"
          fi

          docker build ${BUILD_ARGS} \
            -t ${{ steps.tags.outputs.tag_latest }} \
            -t ${{ steps.tags.outputs.tag_sha }} \
            -f docker/Dockerfile \
            docker/

      - name: 🐳 Push Image
        run: |
          docker push ${{ steps.tags.outputs.tag_latest }}
          docker push ${{ steps.tags.outputs.tag_sha }}

      - name: 📨 Telegram Notification
        if: always()
        run: |
          curl -s -X POST \
            "https://api.telegram.org/bot${{ secrets.TELEGRAM_BOT_TOKEN }}/sendMessage" \
            -d "chat_id=${{ secrets.TELEGRAM_CHAT_ID }}" \
            -d "text=🐳 Build ansible-act-runner:${{ steps.tags.outputs.short_sha }} — ${{ job.status }}"