name: Rebuild signaller for deprived.dev to rebuild site

on: [push]

jobs:
  test_service:
    name: test_service
    runs-on: native   # make sure your runner has a "native" label

    steps:
      - name: Get branch
        run: echo "BRANCH=$(echo \"${{ forgejo.ref }}\" | cut -d'/' -f3)" >> "$FORGEJO_ENV"

      - name: Signal deprived.dev for rebuild
        env:
          SSH_PRIVATE_KEY: ${{ secrets.SSH_KEY }}
          GITKEY: ${{ secrets.GITKEY }}
          PUBLIC_URL_BASE: ${{ vars.PUBLIC_URL_BASE }}
          PUBLIC_POCKET_URL: ${{ vars.PUBLIC_POCKET_URL }}
        run: |
          sshkey=$(mktemp)
          trap "rm -rf \"$sshkey\"" exit

          # write SSH key and lock down permissions
          echo -e "$SSH_PRIVATE_KEY" > "$sshkey"
          chmod 600 "$sshkey"

          service="build-deprived-website-$BRANCH"
          sshargs="-o LogLevel=ERROR -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no"

          echo "Starting systemd oneshot service: $service"
          ssh -i "$sshkey" $sshargs deprivedbuilder@deprived.dev -t \
            "sudo /run/current-system/sw/bin/systemctl start \"$service\""

          echo "Build Log: $(ssh -i "$sshkey" $sshargs deprivedbuilder@deprived.dev "cat ~/latest_build.log")"