# ── Stage: build ─────────────────────────────────────
FROM python:3.12-slim AS base

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1

WORKDIR /app

# Install system deps needed by psycopg2
RUN apt-get update && apt-get install -y \
    libpq-dev gcc \
    && rm -rf /var/lib/apt/lists/*

# Install Python deps first (better layer caching)
COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

# Copy source code
COPY . .

# Collect static files
RUN python manage.py collectstatic --no-input

EXPOSE 8000

# Production server
CMD ["gunicorn", "mysite.wsgi:application", \
     "--bind", "0.0.0.0:8000", \
     "--workers", "4", \
     "--timeout", "120"]

.env                 # never bake secrets into the image
.git
.gitignore
*.pyc
__pycache__/
*.md
tests/
.venv/
node_modules/
staticfiles/         # generated by collectstatic

# Build the image
docker build -t mysite:latest .

# Run locally, injecting the .env file
docker run --env-file .env -p 8000:8000 mysite:latest

# Inspect layers (great for debugging size)
docker history mysite:latest

# Start all services in the background
docker compose up -d

# Run migrations inside the running web container
docker compose exec web python manage.py migrate

# Create a superuser
docker compose exec web python manage.py createsuperuser

# Tail logs from all services
docker compose logs -f

# Rebuild after Dockerfile changes
docker compose up -d --build

# Stop and remove containers (keeps volumes)
docker compose down

# Stop and remove containers AND volumes (wipes db!)
docker compose down -v

server {
    listen 80;
    server_name yourdomain.com;

    # Serve collected static files directly (no Django)
    location /static/ {
        alias /app/staticfiles/;
    }

    # Proxy everything else to Gunicorn
    location / {
        proxy_pass         http://web:8000;
        proxy_set_header   Host              $host;
        proxy_set_header   X-Real-IP         $remote_addr;
        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Proto $scheme;
    }
}

name: Test → Build → Deploy

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

env:
  REGISTRY: ghcr.io
  IMAGE:    ghcr.io/${{ github.repository }}

jobs:

  # ── Job 1: Run tests ──────────────────────────────
  test:
    runs-on: ubuntu-latest
    services:
      postgres:
        image: postgres:16
        env:
          POSTGRES_DB:       testdb
          POSTGRES_USER:     postgres
          POSTGRES_PASSWORD: postgres
        options: >-
          --health-cmd pg_isready
          --health-interval 10s
          --health-timeout 5s
          --health-retries 5

    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with: { python-version: '3.12' }
      - name: Install dependencies
        run: pip install -r requirements.txt
      - name: Run tests
        env:
          DEBUG:       True
          SECRET_KEY:  ci-only-not-real
          DB_HOST:     localhost
          DB_PASSWORD: postgres
        run: pytest --tb=short -q

  # ── Job 2: Build & push image (main only) ─────────
  build-and-push:
    needs: test
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write

    steps:
      - uses: actions/checkout@v4
      - name: Log in to GHCR
        uses: docker/login-action@v3
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Build & push
        uses: docker/build-push-action@v5
        with:
          push: true
          tags: ${{ env.IMAGE }}:latest

  # ── Job 3: Deploy to server ───────────────────────
  deploy:
    needs: build-and-push
    runs-on: ubuntu-latest
    steps:
      - name: SSH & deploy
        uses: appleboy/ssh-action@v1
        with:
          host:     ${{ secrets.SERVER_HOST }}
          username: ${{ secrets.SERVER_USER }}
          key:      ${{ secrets.SERVER_SSH_KEY }}
          script: |
            cd /srv/mysite
            docker compose pull
            docker compose up -d --no-deps web
            docker compose exec -T web python manage.py migrate