name: build-and-push

# Bygger Archivum-imagen på Pi5-runnern (arm64, nativt) och pushar till den lokala
# registryn. Ett enda multi-stage-bygge (frontend -> backend -> runtime), så
# build-context måste vara repo-roten (Dockerfile COPY:ar frontend/, backend/ och
# docker/entrypoint.sh). localhost:5000 trustas automatiskt av Docker på Pi5
# (ingen insecure-registry-config behövs där).
#
# Pull:a på Pi5 med  localhost:5000/archivum:latest  (t.ex. i dockge-stacken).
on:
  push:
    branches: [main, master]
    paths:
      - "backend/**"
      - "frontend/**"
      - "docker/**"
      - ".gitea/workflows/build.yaml"
  workflow_dispatch: {}

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Build & push image
        run: |
          docker build --progress=plain \
            -f docker/Dockerfile \
            -t localhost:5000/archivum:latest \
            -t "localhost:5000/archivum:${GITHUB_SHA::12}" \
            .
          docker push localhost:5000/archivum:latest
          docker push "localhost:5000/archivum:${GITHUB_SHA::12}"