name: Build and Push Docker Image

on:
  push:
    branches:
      - main
  workflow_dispatch:

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    env:
      REGISTRY: gitea.dataprovider01.sandbox-cat-dat.simpl-europe.eu
      IMAGE_REPO: gitea.dataprovider01.sandbox-cat-dat.simpl-europe.eu/j.r/template-code-location
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Validate registry secrets
        run: |
          if [ -z "${{ secrets.REGISTRY_USERNAME }}" ] || [ -z "${{ secrets.REGISTRY_PASSWORD }}" ]; then
            echo "Missing REGISTRY_USERNAME or REGISTRY_PASSWORD secret"
            exit 1
          fi

      - name: Login to registry
        run: |
          echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login "${REGISTRY}" \
            -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin

      - name: Build image
        run: |
          COMMIT_SHA="${GITHUB_SHA:-$GITEA_SHA}"
          SHORT_SHA="$(echo "${COMMIT_SHA}" | cut -c1-12)"
          docker build \
            -t "${IMAGE_REPO}:latest" \
            -t "${IMAGE_REPO}:${SHORT_SHA}" \
            .

      - name: Push image tags
        run: |
          COMMIT_SHA="${GITHUB_SHA:-$GITEA_SHA}"
          SHORT_SHA="$(echo "${COMMIT_SHA}" | cut -c1-12)"
          docker push "${IMAGE_REPO}:latest"
          docker push "${IMAGE_REPO}:${SHORT_SHA}"