name: Publish Docker Image & Release

on:
  push:
    tags:
      - "*.*.*"
      - "!*-*"

permissions:
  contents: read
  packages: write

jobs:

  log-draft-tag:
    runs-on: ubuntu-latest
    steps:
      - name: Read draft tag
        run: |
          echo ${{ github.event.release.id }}

  docker_publish:
    uses: ./.github/workflows/docker.yml
    with:
      add_latest: true
    secrets:
      DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME_2 }}
      DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD_2 }}

  publish_release:
    needs: docker_publish
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/create-github-app-token@v1
        id: app-token
        with:
          app-id: ${{ vars.APP_ID }}
          private-key: ${{ secrets.APP_PRIVATE_KEY }}

      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
          token: ${{ steps.app-token.outputs.token }}
          ref: ${{ github.base_ref }}

      - uses: pnpm/action-setup@v4

      - uses: actions/setup-node@v4
        with:
          node-version: "lts/*"
          cache: "pnpm"

      - run: pnpm install --frozen-lockfile

      - run: git config --global user.name 'github-actions[bot]'
      - run: git config --global user.email 'github-actions[bot]@users.noreply.github.com'

      - name: Publish GitHub Release with release-it
        run: |
          pnpm exec release-it ${{ github.ref_name }} --ci --no-version --no-npm
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

  discord_notification:
    needs: docker_publish
    uses: ./.github/workflows/discord.yml
    with:
      discord_title: "New Release: v${{ github.ref_name }}"
      discord_color: 3066993
      discord_footer: "Portabase"
    secrets:
      DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK }}
      GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}