deploy.sh

# Pulls the latest pre-built image from GHCR and restarts the server.
# Usage: bash deploy.sh

set -euo pipefail

ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
cd "$ROOT_DIR"

ENV_FILE=".env"

if [ ! -f "$ENV_FILE" ]; then
  echo "ERROR: .env not found. Create it from .env.example (at repo root)."
  exit 1
fi

# shellcheck disable=SC1090
source "$ENV_FILE"

if [ -z "${GHCR_USERNAME:-}" ] || [ -z "${GHCR_PAT:-}" ]; then
  echo "ERROR: GHCR_USERNAME and GHCR_PAT must be set in $ENV_FILE"
  exit 1
fi

if [ -z "${DATABASE_URL:-}" ] && [ -z "${DB_PASSWORD:-}" ]; then
  echo "ERROR: Set DATABASE_URL or DB_PASSWORD in $ENV_FILE"
  exit 1
fi

if [ -z "${DATABASE_URL:-}" ]; then
  DATABASE_URL="postgresql://${DB_USER:-interlock}:${DB_PASSWORD}@postgres:5432/${DB_NAME:-interlock}"
fi

if [ -z "${JWT_SECRET:-}" ] || [ -z "${ENCRYPTION_KEY:-}" ]; then
  echo "ERROR: JWT_SECRET and ENCRYPTION_KEY must be set in $ENV_FILE"
  exit 1
fi

echo "==> Logging in to GitHub Container Registry..."
echo "$GHCR_PAT" | docker login ghcr.io -u "$GHCR_USERNAME" --password-stdin

echo "==> Pulling latest Go backend image..."
docker compose -f docker-compose.prod.yml --env-file "$ENV_FILE" pull server-go

echo "==> Running database migrations..."
docker compose -f docker-compose.prod.yml --env-file "$ENV_FILE" run --rm -e DATABASE_URL="$DATABASE_URL" server-go migrate up

echo "==> Restarting containers..."
docker compose -f docker-compose.prod.yml --env-file "$ENV_FILE" up -d

echo "==> Deploy complete. Checking health..."
sleep 5
docker compose -f docker-compose.prod.yml --env-file "$ENV_FILE" ps