stages:
  - build
  - deploy

build:
  stage: build
  image: ${CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX}/golang:bookworm
  before_script:
    - bash hack/install-xcaddy.sh
  script:
    - >
      xcaddy
      build
      v2.10.0
      --output ./caddy
      --with github.com/caddy-dns/cloudflare
  artifacts:
    paths:
      - caddy

deploy:
  stage: deploy
  image: ${CI_DEPENDENCY_PROXY_GROUP_IMAGE_PREFIX}/alpine/ansible:latest
  before_script:
    - "command -v ssh-agent >/dev/null || ( apk add --no-cache openssh-client )"
    - eval $(ssh-agent -s)
    - echo "$SSH_PRIVATE_KEY" | tr -d '\r' | ssh-add - > /dev/null
    - mkdir -p ~/.ssh
    - chmod 700 ~/.ssh
    - ssh-keyscan -H valhalla.vxm.cz >> ~/.ssh/known_hosts
    - ssh-keyscan -H alfheim.vxm.cz >> ~/.ssh/known_hosts
  script:
    - ansible-playbook -i inventory.ini playbook.yml