docker-prod-push.yml

name: Docker Production Build & Push

on:
  workflow_run:
    workflows: ["Dockerfiles Quality Check"]
    types:
      - completed
    branches: [main, master]
  workflow_dispatch:

concurrency:
  group: docker-prod-${{ github.ref }}
  cancel-in-progress: false

permissions:
  contents: read

jobs:
  build-and-push:
    name: Build and Push Production Image
    runs-on: self-hosted # ubuntu-latest
    if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}

    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Extract metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: ${{ secrets.DOCKER_USERNAME }}/thesis-app
          tags: |
            type=ref,event=branch
            type=ref,event=pr  
            type=sha,prefix={{branch}}-
            type=raw,value=latest,enable={{is_default_branch}}
          labels: |
            org.opencontainers.image.title=Thesis Defense Scheduling System
            org.opencontainers.image.description=Complete application for thesis defense scheduling with PostgreSQL, Python API, and Nginx in single container
            org.opencontainers.image.vendor=WinterWollf
            org.opencontainers.image.source=https://github.com/WinterWollf/Engineering-thesis

      - name: Build base images for production
        run: |
          echo "Building base images required for Dockerfile.prod..."
          docker build -f Dockerfile.api -t engineering-thesis-api:latest .
          docker build -f Dockerfile.nginx -t engineering-thesis-nginx:latest .
          echo "Base images built successfully"

      - name: Build production image
        run: |
          echo "Building production image using local base images..."
          docker build -f Dockerfile.prod -t temp-prod-image .
          echo "Production image built successfully"

      - name: Tag and push production image
        run: |
          echo "Tagging and pushing production image..."
          # Parse tags from metadata step
          TAGS="${{ steps.meta.outputs.tags }}"
          LABELS="${{ steps.meta.outputs.labels }}"
          
          # Tag and push each tag
          echo "$TAGS" | while IFS= read -r tag; do
            if [ -n "$tag" ]; then
              echo "Tagging as: $tag"
              docker tag temp-prod-image "$tag"
              echo "Pushing: $tag"
              docker push "$tag"
            fi
          done
          
          echo "All tags pushed successfully"

      - name: Show pushed image info
        run: |
          echo "Successfully pushed image with tags:"
          echo "${{ steps.meta.outputs.tags }}"
          echo ""
          echo "Image labels:"
          echo "${{ steps.meta.outputs.labels }}"
          echo ""
          echo "Pull command for latest:"
          echo "docker pull ${{ secrets.DOCKER_USERNAME }}/thesis-app:latest"