deploy.yml

name: Deploy to Hetzner

on:
  push:
    branches:
      - main
    paths:
      - 'app/**'

jobs:
  deploy:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v2

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v1

      - name: Login to DockerHub
        uses: docker/login-action@v1
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Build and push Docker image
        run: |
          docker build -t ${{ secrets.DOCKER_USERNAME }}/beatcode-server:latest .
          docker push ${{ secrets.DOCKER_USERNAME }}/beatcode-server:latest

      - name: Deploy to Hetzner
        env:
          HETZNER_IP: ${{ secrets.HETZNER_IP }}
          HETZNER_USER: ${{ secrets.HETZNER_USER }}
          HETZNER_SSH_KEY: ${{ secrets.HETZNER_SSH_KEY }}
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.HETZNER_SSH_KEY }}" | tr -d '\r' > ~/.ssh/id_rsa
          chmod 600 ~/.ssh/id_rsa

          scp -o StrictHostKeyChecking=no -i ~/.ssh/id_rsa -r docker/* $HETZNER_USER@$HETZNER_IP:/var/lib/beatcode-server/docker/
          scp -o StrictHostKeyChecking=no -i ~/.ssh/id_rsa docker-compose.yml $HETZNER_USER@$HETZNER_IP:/var/lib/beatcode-server/docker-compose.yml
          scp -o StrictHostKeyChecking=no -i ~/.ssh/id_rsa Dockerfile $HETZNER_USER@$HETZNER_IP:/var/lib/beatcode-server/Dockerfile
          scp -o StrictHostKeyChecking=no -i ~/.ssh/id_rsa requirements.txt $HETZNER_USER@$HETZNER_IP:/var/lib/beatcode-server/requirements.txt

          ssh -o StrictHostKeyChecking=no -i ~/.ssh/id_rsa $HETZNER_USER@$HETZNER_IP << 'EOF'
            cd /var/lib/beatcode-server
            docker pull ${{ secrets.DOCKER_USERNAME }}/beatcode-server:latest
            docker compose down
            docker compose up -d
          EOF