deploy.yml

# -----------------------------------------------------------------------------
# Toggle de GitHub Environments
# -----------------------------------------------------------------------------
# Os jobs abaixo usam a variável de repositório `USE_ENVIRONMENTS` para decidir
# se vinculam o deploy a um GitHub Environment (`homologation` / `production`).
#
# Configuração em Settings → Secrets and variables → Actions:
#
#   Variables → New repository variable
#     • USE_ENVIRONMENTS = "false"  → bypass: nenhum environment é exigido.
#                                     Secrets lidos do nível repositório.
#     • USE_ENVIRONMENTS = "true"   → modo normal: exige que os environments
#                                     `homologation` e `production` existam.
#                                     Secrets do environment têm precedência.
#
#   Secrets necessários (em repository secrets enquanto bypass; podem ser
#   movidos para environment secrets depois):
#     • PORTAINER_DEPLOY_HMG_WEBHOOK_URL
#     • PORTAINER_DEPLOY_PRD_WEBHOOK_URL
#
# Quando os environments forem criados no GitHub, basta alterar
# USE_ENVIRONMENTS para "true" — não é necessário editar este arquivo.
# -----------------------------------------------------------------------------

name: 🚢 Deploy

on:
  workflow_run:
    workflows: ["🚀 Release and build"]
    types: [completed]
    branches: [main]

concurrency:
  group: deploy
  cancel-in-progress: false

jobs:
  deploy-hmg:
    if: ${{ github.event.workflow_run.conclusion == 'success' }}
    runs-on: ubuntu-latest
    environment:
      name: ${{ vars.USE_ENVIRONMENTS == 'true' && 'homologation' || '' }}
    permissions: {}
    steps:
      - name: 🚀 Trigger Portainer webhook (HMG)
        env:
          WEBHOOK_URL: ${{ secrets.PORTAINER_DEPLOY_HMG_WEBHOOK_URL }}
        run: |
          if [ -z "$WEBHOOK_URL" ]; then
            echo "::error::PORTAINER_DEPLOY_HMG_WEBHOOK_URL secret is not set for environment 'homologation'."
            exit 1
          fi
          curl -X POST "$WEBHOOK_URL" \
            -H "Content-Type: application/json" \
            -d '{"ref":"main"}' \
            --fail --silent --show-error
          echo "Homologation deploy triggered."

  deploy-prd:
    needs: deploy-hmg
    runs-on: ubuntu-latest
    environment:
      name: ${{ vars.USE_ENVIRONMENTS == 'true' && 'production' || '' }}
    permissions: {}
    steps:
      - name: 🚀 Trigger Portainer webhook (PRD)
        env:
          WEBHOOK_URL: ${{ secrets.PORTAINER_DEPLOY_PRD_WEBHOOK_URL }}
        run: |
          if [ -z "$WEBHOOK_URL" ]; then
            echo "::error::PORTAINER_DEPLOY_PRD_WEBHOOK_URL secret is not set for environment 'production'."
            exit 1
          fi
          curl -X POST "$WEBHOOK_URL" \
            -H "Content-Type: application/json" \
            -d '{"ref":"main"}' \
            --fail --silent --show-error
          echo "Production deploy triggered."