name: Rebuild signaller for deprived.dev to rebuild site

on: [push]

jobs:
  test_service:
    name: test_service
    runs-on: native   # make sure your runner has a "native" label

    steps:
      - name: Get branch
        run: echo "BRANCH=$(echo \"${{ forgejo.ref }}\" | cut -d'/' -f3)" >> "$FORGEJO_ENV"

      - name: Signal deprived.dev for rebuild
        env:
          SSH_PRIVATE_KEY: ${{ secrets.SSH_KEY }}
          GITKEY: ${{ secrets.GITKEY }}
          PUBLIC_URL_BASE: ${{ vars.PUBLIC_URL_BASE }}
          PUBLIC_POCKET_URL: ${{ vars.PUBLIC_POCKET_URL }}
        run: |
          set -euo pipefail

          sshkey=$(mktemp)
          trap 'rm -f "$sshkey"' EXIT

          printf '%s\n' "$SSH_PRIVATE_KEY" > "$sshkey"
          chmod 600 "$sshkey"

          echo "BRANCH is: $BRANCH"

          service="build-deprived-website-$BRANCH"
          sshargs='-o LogLevel=ERROR -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no'

          echo "Starting systemd oneshot service: $service"

          # No -t, no extra quotes around $service
          ssh -i "$sshkey" $sshargs deprivedbuilder@deprived.dev \
            "sudo /run/current-system/sw/bin/systemctl start $service"

          echo "Build Log:"
          ssh -i "$sshkey" $sshargs deprivedbuilder@deprived.dev \
            "cat ~/latest_build.log"