deploy-dev2.yml

# Ship every merge to dev2, where rssamplifier.com runs since 2026-09-25 (it was
# two Railway services, which deployed on merge by themselves). The box pulls the
# merged commit, rebuilds the web and poller images from the repo's Dockerfiles
# and restarts the compose stack under /home/anthony/www/rssamplifier.com.
name: Deploy to dev2

on:
  push:
    branches: [main]
  workflow_dispatch:
    inputs:
      ref:
        description: Git ref to deploy (defaults to the pushed commit)
        required: false
        type: string

concurrency:
  group: deploy-dev2
  cancel-in-progress: false

jobs:
  deploy:
    runs-on: ubuntu-latest
    timeout-minutes: 45
    steps:
      - name: Resolve target revision
        id: rev
        env:
          REF: ${{ inputs.ref || github.sha }}
        run: echo "sha=$REF" >> "$GITHUB_OUTPUT"

      - name: Set up ssh
        env:
          SSH_KEY: ${{ secrets.DEV2_SSH_KEY }}
          KNOWN_HOSTS: ${{ secrets.DEV2_KNOWN_HOSTS }}
        run: |
          install -d -m 700 ~/.ssh
          printf '%s\n' "$SSH_KEY" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          printf '%s\n' "$KNOWN_HOSTS" > ~/.ssh/known_hosts
          chmod 644 ~/.ssh/known_hosts

      - name: Deploy
        env:
          DEV2_USER: ${{ secrets.DEV2_USER }}
          DEV2_HOST: ${{ secrets.DEV2_HOST }}
          SHA: ${{ steps.rev.outputs.sha }}
        run: |
          ssh -o BatchMode=yes "$DEV2_USER@$DEV2_HOST" \
            /home/anthony/www/rssamplifier.com/deploy-app.sh "$SHA"

      - name: Verify the site answers
        run: |
          for i in $(seq 1 10); do
            code=$(curl -s -o /dev/null -w '%{http_code}' https://rssamplifier.com/ || true)
            if [ "$code" = 200 ]; then echo "rssamplifier.com 200"; exit 0; fi
            echo "attempt $i: $code"; sleep 10
          done
          echo "rssamplifier.com never returned 200"; exit 1