name: Publish portable container

on:
  workflow_dispatch:

jobs:
  publish:
    runs-on: self-hosted
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          repository: ${{ gitea.repository }}
          token: ${{ gitea.token }}
      - name: Install and verify
        run: |
          node scripts/check-node-toolchain.mjs
          pnpm install --frozen-lockfile
          pnpm typecheck
          pnpm biome:lint
          pnpm test:coverage
        env:
          SKIP_ENV_VALIDATION: 1
          NODE_ENV: test
          DATABASE_URL: mysql://test:test@127.0.0.1:9/test
          AUTH_SECRET: container-test-secret-at-least-32-characters
      - name: Build, verify portability and publish
        shell: bash
        env:
          REGISTRY_SERVER: ${{ gitea.server_url }}
          REGISTRY_REPOSITORY: ${{ gitea.repository }}
          REGISTRY_NAMESPACE: ${{ vars.CONTAINER_REGISTRY_NAMESPACE }}
          REGISTRY_USER: ${{ secrets.CONTAINER_REGISTRY_USER }}
          REGISTRY_TOKEN: ${{ secrets.CONTAINER_REGISTRY_TOKEN }}
        run: bash scripts/publish-container.sh