name: Deploy production
on:
  push:
    branches: [main]
  workflow_dispatch:

jobs:
  deploy:
    # Register a dedicated runner on the target host with label wq-production:host.
    runs-on: wq-production
    steps:
      - name: Checkout
        uses: https://github.com/actions/checkout@v4
        with:
          persist-credentials: false
      - name: Build, migrate and deploy
        shell: bash
        env:
          DATABASE_URL: ${{ secrets.DATABASE_URL }}
          ADMIN_PASSWORD: ${{ secrets.ADMIN_PASSWORD }}
          WQ_EMAIL: ${{ secrets.WQ_EMAIL }}
          WQ_PASSWORD: ${{ secrets.WQ_PASSWORD }}
          ENCRYPTION_KEY: ${{ secrets.ENCRYPTION_KEY }}
          ADMIN_USERNAME: ${{ vars.ADMIN_USERNAME }}
          DATABASE_NETWORK: ${{ vars.DATABASE_NETWORK }}
          PUBLIC_ORIGIN: ${{ vars.PUBLIC_ORIGIN }}
        run: bash scripts/deploy-production.sh