# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.

# GitHub recommends pinning actions to a commit SHA.
# To get a newer version, you will need to update the SHA.
# You can also reference a tag or branch, but the action may change without warning.

name: Publish Docker image
on: push

jobs:
  push_to_registry:
    name: Push Docker image to Docker Hub
    runs-on: ubuntu-latest
    # permissions:
    #   packages: write
    #   contents: read
    #   attestations: write
    #   id-token: write
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: "check is REGISTRY_TOKEN exists"
        env:
          super_secret: ${{ secrets.REGISTRY_TOKEN }}
        if: ${{ env.super_secret == '' }}
        run: 'echo "echo the secret \"REGISTRY_TOKEN\" has not been made; echo please go to \"settings \> secrets \> actions\" to create it"'
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: git.letsstein.de
          username: jenkins
          password: ${{ secrets.REGISTRY_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@v3
        with:
          images: git.letsstein.de/tom/anki_convert
          tags: |
            type=raw,value=latest,enable={{is_default_branch}}
            type=sha

      - name: Build and push Docker image
        id: push
        uses: docker/build-push-action@v3
        with:
          context: .
          file: ./Dockerfile
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}