name: Deploy Node App

on:
  push:
    branches: [main]
  workflow_dispatch:

jobs:
  deploy:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Setup SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.DEPLOY_KEY }}" | base64 -d | base64 -d > ~/.ssh/id_deploy
          chmod 600 ~/.ssh/id_deploy
          ssh-keyscan -H 172.17.0.1 >> ~/.ssh/known_hosts 2>/dev/null || true

      - name: Deploy to server
        run: |
          ssh -o StrictHostKeyChecking=accept-new \
              -o UserKnownHostsFile=/dev/null \
              -i ~/.ssh/id_deploy \
              deploy@172.17.0.1 \
              'sudo /home/deploy/scripts/deploy-node.sh main'