deploy.yml

name: Deploy Docs to Server

on:
  push:
    branches: [main]
  workflow_dispatch:

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Setup SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.SERVER_SSH_KEY }}" > ~/.ssh/deploy_key
          chmod 600 ~/.ssh/deploy_key
          ssh-keyscan -H ${{ secrets.SERVER_HOST }} >> ~/.ssh/known_hosts 2>/dev/null

      - name: Deploy to server
        timeout-minutes: 30
        run: |
          DEPLOY_PATH="${{ secrets.DEPLOY_PATH }}"
          DOCS_PATH="$(dirname "${{ secrets.DEPLOY_PATH }}")/owlstack-docs"

          ssh -i ~/.ssh/deploy_key "${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}" bash << EOF
            set -e
            export PATH=\$PATH:/usr/local/bin:/usr/bin

            echo "=========================================="
            echo "OwlStack Docs Deploy — \$(date)"
            echo "=========================================="

            # Pull latest docs source
            echo ">>> Pulling docs source..."
            cd "$DOCS_PATH"
            git fetch origin main
            git reset --hard origin/main

            # Pull latest deploy config
            echo ">>> Pulling deploy config..."
            cd "$DEPLOY_PATH"
            git fetch origin main
            git reset --hard origin/main

            # Build docs (CPU-throttled)
            echo ">>> Building docs..."
            nice -n 19 docker compose build docs

            # Restart docs service
            echo ">>> Restarting docs..."
            docker compose up -d docs

            docker image prune -f

            echo "=========================================="
            echo "Docs deploy complete!"
            echo "=========================================="
          EOF

      - name: Cleanup SSH key
        if: always()
        run: rm -f ~/.ssh/deploy_key