pipeline:
  lint:
    image: earthly/earthly:v0.7.15
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - FORCE_COLOR=1
      - EARTHLY_EXEC_CMD="/bin/sh"
    secrets: [EARTHLY_CONFIGURATION]
    commands:
      - mkdir ~/.earthly && echo "$EARTHLY_CONFIGURATION" > ~/.earthly/config.yaml
      - earthly bootstrap
      - earthly +lint

  # audit:
  #   image: earthly/earthly:v0.7.15
  #   volumes:
  #     - /var/run/docker.sock:/var/run/docker.sock
  #   environment:
  #     - FORCE_COLOR=1
  #     - EARTHLY_EXEC_CMD="/bin/sh"
  #   secrets: [EARTHLY_CONFIGURATION]
  #   commands:
  #     - mkdir ~/.earthly && echo "$EARTHLY_CONFIGURATION" > ~/.earthly/config.yaml
  #     - earthly bootstrap
  #     - earthly +audit

  test:
    image: earthly/earthly:v0.7.15
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - FORCE_COLOR=1
      - EARTHLY_EXEC_CMD="/bin/sh"
    secrets: [EARTHLY_CONFIGURATION]
    commands:
      - mkdir ~/.earthly && echo "$EARTHLY_CONFIGURATION" > ~/.earthly/config.yaml
      - earthly bootstrap
      - earthly +test

  appimage:
    image: earthly/earthly:v0.7.15
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - FORCE_COLOR=1
      - EARTHLY_EXEC_CMD="/bin/sh"
    secrets: [EARTHLY_CONFIGURATION, REGISTRY, REGISTRY_USER, REGISTRY_PASSWORD]
    commands:
      - mkdir ~/.earthly && echo "$EARTHLY_CONFIGURATION" > ~/.earthly/config.yaml
      - earthly bootstrap
      - earthly +appimage

  appimage:save:
    group: push
    image: woodpeckerci/plugin-s3
    settings:
      endpoint:
        from_secret: S3_ENDPOINT
      access_key:
        from_secret: S3_ACCESS_KEY
      secret_key:
        from_secret: S3_SECRET_KEY
      bucket: upend-ci-packages
      path_style: true
      region: anabasis
      source: "dist/*.AppImage"
      target: /
    secrets: [S3_ENDPOINT, S3_ACCESS_KEY, S3_SECRET_KEY]

  appimage:publish:nightly:
    group: push
    image: earthly/earthly:v0.7.15
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - FORCE_COLOR=1
      - EARTHLY_EXEC_CMD="/bin/sh"
    secrets:
      [
        EARTHLY_CONFIGURATION,
        GPG_SIGN_KEY,
        SSH_CONFIG,
        SSH_UPLOAD_KEY,
        SSH_KNOWN_HOSTS,
      ]
    commands:
      - mkdir ~/.earthly && echo "$EARTHLY_CONFIGURATION" > ~/.earthly/config.yaml
      - earthly bootstrap
      - earthly --secret GPG_SIGN_KEY --secret SSH_CONFIG --secret SSH_UPLOAD_KEY --secret SSH_KNOWN_HOSTS +deploy-appimage-nightly
    when:
      branch: [main]

  docker:nightly:
    group: push
    image: earthly/earthly:v0.7.15
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - FORCE_COLOR=1
      - EARTHLY_EXEC_CMD="/bin/sh"
    secrets: [EARTHLY_CONFIGURATION, DOCKER_USER, DOCKER_PASSWORD]
    commands:
      - echo $${DOCKER_PASSWORD}| docker login --username $${DOCKER_USER} --password-stdin
      - mkdir ~/.earthly && echo "$EARTHLY_CONFIGURATION" > ~/.earthly/config.yaml
      - earthly bootstrap
      - earthly --push +docker-minimal
      - earthly --push +docker
    when:
      branch: [main]

  docker:release:
    group: push
    image: earthly/earthly:v0.7.15
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - FORCE_COLOR=1
      - EARTHLY_EXEC_CMD="/bin/sh"
    secrets: [EARTHLY_CONFIGURATION, DOCKER_USER, DOCKER_PASSWORD]
    commands:
      - echo $${DOCKER_PASSWORD}| docker login --username $${DOCKER_USER} --password-stdin
      - mkdir ~/.earthly && echo "$EARTHLY_CONFIGURATION" > ~/.earthly/config.yaml
      - earthly bootstrap
      - earthly --push +docker-minimal --tag=latest
      - earthly --push +docker-minimal --tag=$CI_COMMIT_TAG
      - earthly --push +docker --tag=latest
      - earthly --push +docker --tag=$CI_COMMIT_TAG
    when:
      event: [tag]

  gitea:release:
    group: push
    image: woodpeckerci/plugin-gitea-release
    settings:
      base_url: https://git.thm.place
      files:
        - "*.AppImage"
        - "*.asc"
        - webext/web-ext-artifacts/*.zip
      checksum: sha512
      api_key:
        from_secret: woodpecker_api_key
      target: main
    when:
      event: [tag]