docker-publish.yml

name: Docker Build and Publish

on:
  push:
    branches: ["main"]
  release:
    types: [created]

env:
  DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
  DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
  IMAGE_NAME: ${{ secrets.DOCKERHUB_USERNAME }}/hxckr-core
  CARGO_TERM_COLOR: always

jobs:
  build-and-push-dev:
    if: github.event_name == 'push'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Install Nix
        uses: cachix/install-nix-action@v20
        with:
          nix_path: nixpkgs=channel:nixos-unstable
          extra_nix_config: |
            experimental-features = nix-command flakes
            accept-flake-config = true
            keep-outputs = true
            keep-derivations = true

      - name: Setup Nix caching
        uses: actions/cache@v3
        with:
          path: |
            ~/.cache/nix
          key: ${{ runner.os }}-nix-${{ hashFiles('**/docker-image.nix', '**/Cargo.lock') }}
          restore-keys: |
            ${{ runner.os }}-nix-

      - name: Build with Nix
        run: |
          nix-build build-image.nix
          docker load < result

      - name: Verify image contents
        run: |
          docker run --rm hxckr-core:latest ls -l /app
          docker run --rm hxckr-core:latest ls -l /app/migrations
          docker run --rm hxckr-core:latest cat /app/entrypoint.sh
          docker run --rm hxckr-core:latest diesel --version

      - name: Login to DockerHub
        uses: docker/login-action@v2
        with:
          username: ${{ env.DOCKERHUB_USERNAME }}
          password: ${{ env.DOCKERHUB_TOKEN }}

      - name: Push Docker image
        run: |
          docker tag hxckr-core:latest ${{ env.IMAGE_NAME }}:dev
          docker tag hxckr-core:latest ${{ env.IMAGE_NAME }}:${{ github.sha }}
          docker push ${{ env.IMAGE_NAME }}:dev
          docker push ${{ env.IMAGE_NAME }}:${{ github.sha }}

      - name: Print image size and details
        run: |
          docker image ls ${{ env.IMAGE_NAME }}:dev
          docker history ${{ env.IMAGE_NAME }}:dev

  build-and-push-prod:
    if: github.event_name == 'release'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Setup Rust
        uses: actions-rs/toolchain@v1
        with:
          profile: minimal
          toolchain: stable

      - name: Build project
        run: |
          cargo install cargo-chef
          cargo chef prepare --recipe-path recipe.json
          cargo chef cook --release --recipe-path recipe.json
          cargo build --release --all-features

      - name: Login to DockerHub
        uses: docker/login-action@v2
        with:
          username: ${{ env.DOCKERHUB_USERNAME }}
          password: ${{ env.DOCKERHUB_TOKEN }}

      - name: Build and push Docker image
        uses: docker/build-push-action@v4
        with:
          context: .
          file: Dockerfile
          platforms: linux/amd64,linux/arm64
          push: true
          tags: |
            ${{ env.IMAGE_NAME }}:latest
            ${{ env.IMAGE_NAME }}:${{ github.ref_name }}
          cache-from: type=registry,ref=${{ env.IMAGE_NAME }}:buildcache
          cache-to: type=registry,ref=${{ env.IMAGE_NAME }}:buildcache,mode=max

      - name: Run migrations
        env:
          DATABASE_URL: ${{ secrets.PRODUCTION_DATABASE_URL }}
        run: |
          docker run --rm \
            -e DATABASE_URL \
            ${{ env.IMAGE_NAME }}:${{ github.ref_name }} \
            diesel migration run

      - name: Print image size and details
        run: |
          docker image ls ${{ env.IMAGE_NAME }}:${{ github.ref_name }}
          docker history ${{ env.IMAGE_NAME }}:${{ github.ref_name }}