name: Update Docker Image Tags and Release Helm Chart

on:
  schedule:
    - cron: "0 4 * * 1"  # 毎週月曜日 04:00 UTC (JST 13:00)
  workflow_dispatch:

jobs:
  update-and-release:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Check for new YOURLS FPM Alpine version
        id: yourls
        run: |
          set -e
          echo "Checking YOURLS fpm-alpine versions..."
          CURRENT=$(grep -A3 "yourls:" values.yaml | grep "tag:" | head -1 | sed 's/.*tag: *"\([^"]*\)".*/\1/' | tr -d ' ')
          echo "Current YOURLS: $CURRENT"

          # 公式イメージは docker.io/yourls (docker-library配下)。
          # docker.io/yourls/yourls という別名前空間のイメージは非公式のため使用しない。
          LATEST=$(curl -s "https://hub.docker.com/v2/repositories/library/yourls/tags?page_size=100&name=fpm-alpine" | \
            jq -r '.results[].name' | \
            grep -E '^[0-9]+\.[0-9]+\.[0-9]+-fpm-alpine$' | \
            grep -v 'rc' | \
            grep -v 'beta' | \
            grep -v 'alpha' | \
            sort -V | \
            tail -n 1)

          if [ -z "$LATEST" ]; then
            echo "Warning: Could not fetch latest YOURLS version, using current"
            LATEST="$CURRENT"
          fi

          APP_VERSION=$(echo "$LATEST" | grep -oE '^[0-9]+\.[0-9]+\.[0-9]+')
          if [ -z "$APP_VERSION" ]; then
            echo "Warning: Could not extract YOURLS version from: $LATEST"
            APP_VERSION=$(echo "$CURRENT" | grep -oE '^[0-9]+\.[0-9]+\.[0-9]+')
          fi

          echo "Latest YOURLS: $LATEST"
          echo "YOURLS version: $APP_VERSION"

          echo "current=$CURRENT" >> $GITHUB_OUTPUT
          echo "latest=$LATEST" >> $GITHUB_OUTPUT
          echo "app_version=$APP_VERSION" >> $GITHUB_OUTPUT

      - name: Check for new Nginx Alpine Perl version
        id: nginx
        run: |
          set -e
          echo "Checking Nginx Alpine Perl versions..."
          CURRENT=$(grep -A3 "nginx:" values.yaml | grep "tag:" | head -1 | sed 's/.*tag: *"\([^"]*\)".*/\1/' | tr -d ' ')
          echo "Current Nginx: $CURRENT"

          LATEST=$(curl -s "https://hub.docker.com/v2/repositories/library/nginx/tags?page_size=100&name=alpine-perl" | \
            jq -r '.results[].name' | \
            grep -E '^[0-9]+\.[0-9]+\.[0-9]+-alpine-perl$' | \
            grep -v 'rc' | \
            grep -v 'beta' | \
            grep -v 'alpha' | \
            sort -V | \
            tail -n 1)

          if [ -z "$LATEST" ]; then
            echo "Warning: Could not fetch latest Nginx version, using current"
            LATEST="$CURRENT"
          fi
          echo "Latest Nginx: $LATEST"
          echo "current=$CURRENT" >> $GITHUB_OUTPUT
          echo "latest=$LATEST" >> $GITHUB_OUTPUT

      - name: Determine if update is needed
        id: check_update
        run: |
          set -e
          YOURLS_CURRENT="${{ steps.yourls.outputs.current }}"
          YOURLS_LATEST="${{ steps.yourls.outputs.latest }}"
          NGINX_CURRENT="${{ steps.nginx.outputs.current }}"
          NGINX_LATEST="${{ steps.nginx.outputs.latest }}"

          echo "YOURLS: $YOURLS_CURRENT vs $YOURLS_LATEST"
          echo "Nginx: $NGINX_CURRENT vs $NGINX_LATEST"

          UPDATE_NEEDED=false
          YOURLS_UPDATED=false

          if [ "$YOURLS_CURRENT" != "$YOURLS_LATEST" ]; then
            UPDATE_NEEDED=true
            YOURLS_UPDATED=true
            echo "YOURLS update detected"
          fi

          if [ "$NGINX_CURRENT" != "$NGINX_LATEST" ]; then
            UPDATE_NEEDED=true
            echo "Nginx update detected"
          fi

          echo "update_needed=$UPDATE_NEEDED" >> $GITHUB_OUTPUT
          echo "yourls_updated=$YOURLS_UPDATED" >> $GITHUB_OUTPUT

          if [ "$UPDATE_NEEDED" = "true" ]; then
            echo "Update is needed"
          else
            echo "Already up to date - no action required"
          fi

      - name: Update values.yaml
        if: steps.check_update.outputs.update_needed == 'true'
        run: |
          set -e
          echo "Updating values.yaml..."

          YOURLS_OLD="${{ steps.yourls.outputs.current }}"
          YOURLS_NEW="${{ steps.yourls.outputs.latest }}"
          if [ "$YOURLS_OLD" != "$YOURLS_NEW" ]; then
            sed -i "s|tag: \"${YOURLS_OLD}\"|tag: \"${YOURLS_NEW}\"|g" values.yaml
            echo "YOURLS updated: $YOURLS_OLD -> $YOURLS_NEW"
          fi

          NGINX_OLD="${{ steps.nginx.outputs.current }}"
          NGINX_NEW="${{ steps.nginx.outputs.latest }}"
          if [ "$NGINX_OLD" != "$NGINX_NEW" ]; then
            sed -i "s|tag: \"${NGINX_OLD}\"|tag: \"${NGINX_NEW}\"|g" values.yaml
            echo "Nginx updated: $NGINX_OLD -> $NGINX_NEW"
          fi

          echo "values.yaml updated"
          git diff values.yaml

      - name: Update Chart.yaml version
        if: steps.check_update.outputs.yourls_updated == 'true'
        run: |
          set -e
          APP_VERSION="${{ steps.yourls.outputs.app_version }}"
          sed -i "s/^version: .*/version: $APP_VERSION/" Chart.yaml
          sed -i "s/^appVersion: .*/appVersion: \"$APP_VERSION\"/" Chart.yaml
          echo "Chart.yaml updated to version $APP_VERSION"
          cat Chart.yaml

      - name: Commit changes
        if: steps.check_update.outputs.update_needed == 'true'
        run: |
          git config user.name "Gitea Actions Bot"
          git config user.email "actions@git.cafepieters.com"

          if [ "${{ steps.check_update.outputs.yourls_updated }}" = "true" ]; then
            git add values.yaml Chart.yaml
            git commit -m "chore: update to YOURLS ${{ steps.yourls.outputs.app_version }}, nginx ${{ steps.nginx.outputs.latest }}"
          else
            git add values.yaml
            git commit -m "chore: update nginx to ${{ steps.nginx.outputs.latest }} (no release)"
          fi

          MAX_RETRIES=3
          RETRY_COUNT=0
          until git push origin main || [ $RETRY_COUNT -eq $MAX_RETRIES ]; do
            RETRY_COUNT=$((RETRY_COUNT+1))
            echo "Push failed, retrying ($RETRY_COUNT/$MAX_RETRIES)..."
            sleep 5
            git pull --rebase origin main
          done

          if [ $RETRY_COUNT -eq $MAX_RETRIES ]; then
            echo "ERROR: Failed to push after $MAX_RETRIES attempts"
            exit 1
          fi

          echo "Successfully pushed changes to main branch"

      - name: Install Helm
        if: steps.check_update.outputs.yourls_updated == 'true'
        uses: azure/setup-helm@v3
        with:
          version: 'latest'

      - name: Package Helm Chart
        if: steps.check_update.outputs.yourls_updated == 'true'
        run: |
          helm package .
          echo "Helm chart packaged"

      - name: Create Git Tag
        if: steps.check_update.outputs.yourls_updated == 'true'
        run: |
          APP_VERSION="${{ steps.yourls.outputs.app_version }}"

          if git rev-parse "v$APP_VERSION" >/dev/null 2>&1; then
            echo "Tag v$APP_VERSION already exists, skipping tag creation"
          else
            git tag -a "v$APP_VERSION" -m "Release YOURLS $APP_VERSION"
            git push origin "v$APP_VERSION"
            echo "Git tag v$APP_VERSION created"
          fi

      - name: Create Gitea Release
        if: steps.check_update.outputs.yourls_updated == 'true'
        env:
          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
        run: |
          APP_VERSION="${{ steps.yourls.outputs.app_version }}"
          CHART_NAME=$(grep '^name:' Chart.yaml | awk '{print $2}')
          PACKAGE_FILE="${CHART_NAME}-${APP_VERSION}.tgz"
          RELEASE_BODY="YOURLS Helm Chart v${APP_VERSION} - Automated release"

          if curl -s -H "Authorization: token ${GITEA_TOKEN}" "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/releases/tags/v${APP_VERSION}" | jq -e '.id' >/dev/null 2>&1; then
            echo "Release v$APP_VERSION already exists, skipping release creation"
          else
            curl -X POST \
              -H "Authorization: token ${GITEA_TOKEN}" \
              -H "Content-Type: application/json" \
              -d "{\"tag_name\":\"v${APP_VERSION}\",\"name\":\"v${APP_VERSION}\",\"body\":\"${RELEASE_BODY}\"}" \
              "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/releases"

            RELEASE_ID=$(curl -s \
              -H "Authorization: token ${GITEA_TOKEN}" \
              "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/releases/tags/v${APP_VERSION}" | jq -r '.id')

            curl -X POST \
              -H "Authorization: token ${GITEA_TOKEN}" \
              -H "Content-Type: application/gzip" \
              --data-binary "@${PACKAGE_FILE}" \
              "${GITHUB_API_URL}/repos/${GITHUB_REPOSITORY}/releases/${RELEASE_ID}/assets?name=${PACKAGE_FILE}"

            echo "Release v${APP_VERSION} created with asset ${PACKAGE_FILE}"
          fi

      - name: Publish to Gitea Package Registry
        if: steps.check_update.outputs.yourls_updated == 'true'
        run: |
          set -e
          APP_VERSION="${{ steps.yourls.outputs.app_version }}"
          CHART_NAME=$(grep '^name:' Chart.yaml | awk '{print $2}')
          PACKAGE_FILE="${CHART_NAME}-${APP_VERSION}.tgz"

          echo "🚀 Publishing ${PACKAGE_FILE} to Gitea Package Registry..."

          curl --fail-with-body \
            -u "${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_TOKEN }}" \
            -X POST \
            --upload-file "${PACKAGE_FILE}" \
            "https://git.cafepieters.com/api/packages/helmchart/helm/api/charts"

          echo "✅ Chart published successfully to Gitea Package Registry"

      - name: Summary
        if: always()
        run: |
          APP_VERSION="${{ steps.yourls.outputs.app_version }}"
          NGINX_VERSION="${{ steps.nginx.outputs.latest }}"
          YOURLS_UPDATED="${{ steps.check_update.outputs.yourls_updated }}"

          echo "================================"
          echo "Update completed!"
          echo "- YOURLS: ${APP_VERSION}"
          echo "- Nginx: ${NGINX_VERSION}"
          echo ""

          if [ "$YOURLS_UPDATED" = "true" ]; then
            echo "✅ YOURLS version updated - Release created (v${APP_VERSION})"
            echo "YOURLS updated: ${{ steps.yourls.outputs.current }} -> ${{ steps.yourls.outputs.latest }}"
            echo "Nginx updated: ${{ steps.nginx.outputs.current }} -> ${{ steps.nginx.outputs.latest }}"
          elif [ "${{ steps.check_update.outputs.update_needed }}" = "true" ]; then
            echo "ℹ️  Nginx only update - No release (waiting for next YOURLS update)"
            echo "Nginx updated: ${{ steps.nginx.outputs.current }} -> ${{ steps.nginx.outputs.latest }}"
          else
            echo "ℹ️  Already up to date - no action required"
          fi
          echo "================================"