name: build-and-push

# CI/CD-pipeline demo (it-admin-3g4): build -> push naar de lokale registry.
# De job draait op node:20-bookworm; docker-CLI praat via de gedeelde DinD-socket
# (unix:///var/run/docker.sock, gemount door de runner-config).

on:
  push:
    branches: [main]

jobs:
  build-push:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install docker CLI
        run: |
          apt-get update -qq
          apt-get install -y -qq docker.io

      - name: Registry login
        env:
          REG_USER: ${{ secrets.REGISTRY_USER }}
          REG_PW: ${{ secrets.REGISTRY_PASSWORD }}
        run: echo "$REG_PW" | docker login 10.0.0.18:5000 -u "$REG_USER" --password-stdin

      - name: Build image
        run: docker build -t 10.0.0.18:5000/ci-pipeline-demo:${{ github.sha }} -t 10.0.0.18:5000/ci-pipeline-demo:latest .

      - name: Push image
        run: |
          docker push 10.0.0.18:5000/ci-pipeline-demo:${{ github.sha }}
          docker push 10.0.0.18:5000/ci-pipeline-demo:latest

      # DEPLOY-ROUTE (per repo instelbaar):
      # Route A (Action deployt direct): uncomment. Alleen vertrouwde repos.
      #   - name: Deploy (route A)
      #     run: |
      #       docker pull 10.0.0.18:5000/ci-pipeline-demo:latest
      #       docker rm -f ci-pipeline-demo || true
      #       docker run -d --name ci-pipeline-demo 10.0.0.18:5000/ci-pipeline-demo:latest
      # Route B (Dockhand): geen deploy-stap; label dockhand.update=true op de doel-container.