kind: pipeline
type: exec
name: deploy
clone:
  disable: true

trigger:
  branch:
    - test
  event:
    - push

steps:
  - name: deploy
    environment:
      DEPLOY_BRANCH: deploy
      REPO_DIR: /root/projects/nuxt4-demo/nuxt4-demo-origin
      GIT_REMOTE: ssh://root@git.xieyaxin.top:8892/topuser/nuxt4-demo.git
      GIT_SSH_HOST: git.xieyaxin.top
      GIT_SSH_PORT: "8892"
      UNZIP_DIR: /root/projects/nuxt4-demo/nuxt4-demo
      DEPLOY_SSH_KEY:
        from_secret: DEPLOY_SSH_KEY
    commands:
      - mkdir -p -m 700 "/root/.ssh"
      - umask 077 && printf '%s\n' "$DEPLOY_SSH_KEY" > "/root/.ssh/id_rsa"
      # 须与 GIT_REMOTE 主机一致，否则 StrictHostKeyChecking 会因缺少 [host]:port 的密钥失败
      - 'ssh-keyscan -p "$GIT_SSH_PORT" -H -T 15 "$GIT_SSH_HOST" > "/root/.ssh/known_hosts" && chmod 644 "/root/.ssh/known_hosts"'
      - 'export SSH_OPTS="-i /root/.ssh/id_rsa -p $GIT_SSH_PORT -o IdentitiesOnly=yes -o UserKnownHostsFile=/root/.ssh/known_hosts -o StrictHostKeyChecking=yes -o BatchMode=yes -o ConnectTimeout=10 -o ServerAliveInterval=15 -o ServerAliveCountMax=3"'
      # 自托管 Gitea 等在认证成功时仍可能返回非 0，故忽略退出码
      - 'ssh $SSH_OPTS -T root@"$GIT_SSH_HOST" || true'
      - 'export GIT_SSH_COMMAND="ssh $SSH_OPTS"'
      - |
        set -e
        BRANCH="$DEPLOY_BRANCH"
        REPO_DIR="$REPO_DIR"
        GIT_REMOTE="$GIT_REMOTE"
        if [ -d "$REPO_DIR/.git" ]; then
          git -C "$REPO_DIR" fetch --depth 1 origin "$BRANCH"
          git -C "$REPO_DIR" checkout -B "$BRANCH" "origin/$BRANCH"
          git -C "$REPO_DIR" reset --hard "origin/$BRANCH"
          git -C "$REPO_DIR" clean -fdx
        else
          rm -rf "$REPO_DIR"
          mkdir -p "$(dirname "$REPO_DIR")"
          git clone --depth 1 -b "$BRANCH" "$GIT_REMOTE" "$REPO_DIR"
        fi
      - |
        set -e
        [ -f "$REPO_DIR/build-output.tar.gz" ] || { echo "build-output.tar.gz not found in $REPO_DIR"; exit 1; }
        rm -rf "$UNZIP_DIR"
        mkdir -p "$UNZIP_DIR"
        tar -xzf "$REPO_DIR/build-output.tar.gz" -C "$UNZIP_DIR"