name: Docker Compose PR Check and Deploy

on:
  pull_request:
    types: [synchronize, opened, reopened]
    branches:
      - main

jobs:
  setup-sonarqube:
    name: Setup SonarQube Project and Analyze
    runs-on: self-hosted
    steps:
      - name: Checkout Code
        uses: actions/checkout@v3

      - name: Log Current Directory
        run: |
          echo "Current directory contents:"
          ls -la
          echo "Working in directory: $(pwd)"

      - name: SonarQube Scan
        uses: kitabisa/sonarqube-action@v1.2.0
        with:
          host: ${{ secrets.SONARQUBE_HOST }}
          login: ${{ secrets.SONARQUBE_TOKEN }}

      # - name: Run SonarQube Analysis
      #   env:
      #     SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
      #     SONAR_URL: ${{ secrets.SONARQUBE_URL }}
      #   run: |
      #     echo "Starting SonarQube analysis..."
      #     sonar-scanner \
      #       -Dsonar.projectKey=${{ gitea.repository.name }} \
      #       -Dsonar.sources=. \
      #       -Dsonar.language=docker \
      #       -Dsonar.host.url=$SONAR_URL \
      #       -Dsonar.login=$SONAR_TOKEN \
      #       -X
      #     echo "SonarQube analysis completed."

      - name: Comment on PR with SonarQube Status
        env:
          SONAR_TOKEN: ${{ secrets.SONARQUBE_TOKEN }}
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
          SONAR_URL: ${{ secrets.SONARQUBE_URL }}
          GITEA_SERVER: ${{ secrets.GITEA_SERVER }}
        run: |
          echo "Fetching SonarQube project status..."
          STATUS=$(curl -s -u "$SONAR_TOKEN:" "$SONAR_URL/api/qualitygates/project_status?projectKey=${{ gitea.repository.name }}" | jq -r '.projectStatus.status')
          echo "SonarQube quality gate status: $STATUS"
          COMMENT="SonarQube Analysis: $STATUS\n[View in SonarQube]($SONAR_URL/dashboard?id=${{ gitea.repository.name }})"
          echo "Adding comment to PR: $COMMENT"
          curl -X POST -H "Authorization: token $GITEA_TOKEN" \
            -H "Content-Type: application/json" \
            -d "{\"body\": \"$COMMENT\"}" \
            "$GITEA_SERVER/api/v1/repos/${{ gitea.repository.owner.login }}/${{ gitea.repository.name }}/issues/${{ gitea.pull_request.id }}/comments"

  status-check:
    name: Validate SonarQube Bot Status
    needs: setup-sonarqube
    runs-on: self-hosted
    steps:
      - name: Fetch PR Status
        run: |
          echo "Validating SonarQube bot status..."
          curl -s \
            -H "Authorization: token $GITEA_TOKEN" \
            "$GITEA_SERVER/api/v1/repos/${{ gitea.repository.owner.login }}/${{ gitea.repository.name }}/pulls/${{ gitea.pull_request.id }}/status" \
            | jq -e '.statuses[] | select(.creator.login == "gitea-sonarqube-bot" and .status == "success")' || exit 1
          echo "SonarQube bot status validation successful."

  dry-run:
    name: Dry Run Docker Compose
    runs-on: self-hosted
    needs: status-check
    steps:
      - name: Checkout Code
        uses: actions/checkout@v3

      - name: Validate Docker Compose
        run: |
          echo "Validating Docker Compose configuration..."
          docker compose config -f docker-compose.yml
          echo "Docker Compose validation successful."

  manual-approval:
    name: Manual Approval
    runs-on: self-hosted
    needs: dry-run
    steps:
      - name: Approval Required
        run: |
          echo "Manual approval step reached. Please approve to proceed."
          exit 1

  merge-and-deploy:
    name: Merge and Deploy
    runs-on: self-hosted
    needs: manual-approval
    steps:
      - name: Merge Pull Request
        env:
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
        run: |
          echo "Merging pull request into main..."
          RESPONSE=$(curl -X POST \
            -H "Authorization: token $GITEA_TOKEN" \
            "$GITEA_SERVER/api/v1/repos/${{ gitea.repository.owner.login }}/${{ gitea.repository.name }}/pulls/${{ gitea.pull_request.id }}/merge")
          echo "Merge response: $RESPONSE"

      - name: Deploy Docker Compose Changes
        run: |
          echo "Deploying Docker Compose changes to host..."
          ssh $DOCKER_USER@$DOCKER_HOST "
            echo 'Pulling new images...'
            cd /path/to/docker/compose/files &&
            docker compose pull
            echo 'Applying changes...'
            docker compose up -d --remove-orphans
          "
        env:
          DOCKER_HOST: ${{ secrets.DOCKER_HOST }}
          DOCKER_USER: ${{ secrets.DOCKER_USER }}
          SSH_KEY: ${{ secrets.DOCKER_SSH_KEY }}
          SSH_AUTH_SOCK: /run/ssh-agent.sock