lnbitsapi-dev.yaml

name: LDS LNBITSAPI DEV CI/CD

on:
  push:
    branches: [develop]
    paths:
      - 'infrastructure/lnbitsapi/**'
  workflow_dispatch:

env:
  DOCKER_TAGS: lightningdotspacecom/lnbitsapi:beta

permissions:
  contents: read

jobs:
  build-and-deploy:
    name: Build and deploy to DEV
    runs-on: ubuntu-24.04-arm
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Log in to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build and push Docker image
        uses: docker/build-push-action@v6
        with:
          context: ./infrastructure/lnbitsapi
          push: true
          tags: ${{ env.DOCKER_TAGS }}
          platforms: linux/arm64

      - name: Install cloudflared
        run: |
          curl -fsSL https://github.com/cloudflare/cloudflared/releases/download/2025.4.0/cloudflared-linux-arm64 -o /usr/local/bin/cloudflared
          chmod +x /usr/local/bin/cloudflared

      - name: Deploy
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.DEPLOY_DEV_SSH_KEY }}" > ~/.ssh/deploy_key
          chmod 600 ~/.ssh/deploy_key
          echo "${{ secrets.DEPLOY_DEV_SSH_KNOWN_HOSTS }}" > ~/.ssh/known_hosts
          ssh -i ~/.ssh/deploy_key \
            -o ProxyCommand="cloudflared access ssh --hostname ${{ secrets.DEPLOY_DEV_HOST }}" \
            ${{ secrets.DEPLOY_DEV_USER }}@${{ secrets.DEPLOY_DEV_HOST }} \
            "lds-lnbitsapi"