deploy-hetzner.yml

name: deploy-hetzner

on:
  push:
    branches: [master]
  workflow_dispatch:

concurrency:
  group: deploy-hetzner
  cancel-in-progress: false

jobs:
  build-and-deploy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - uses: actions/setup-go@v5
        with:
          go-version: '1.23'
          cache: true

      - name: Test
        run: go test -v ./...

      - name: Build (ARM64)
        run: |
          CGO_ENABLED=0 GOOS=linux GOARCH=arm64 \
            go build -trimpath -ldflags="-s -w" -o lyrics-api-go .

      - name: SSH setup
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.SSH_KEY }}" > ~/.ssh/id_ed25519
          chmod 600 ~/.ssh/id_ed25519
          ssh-keyscan -H ${{ secrets.SSH_HOST }} >> ~/.ssh/known_hosts

      - name: Deploy
        run: |
          scp -i ~/.ssh/id_ed25519 lyrics-api-go \
            ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}:/opt/lyrics-api/lyrics-api-go.new
          ssh -i ~/.ssh/id_ed25519 ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }} '
            set -eo pipefail
            mv /opt/lyrics-api/lyrics-api-go.new /opt/lyrics-api/lyrics-api-go
            chmod +x /opt/lyrics-api/lyrics-api-go
            sudo systemctl restart lyrics-api
            for i in $(seq 1 30); do
              if curl -sf http://localhost:8080/health > /dev/null 2>&1; then
                echo "Service healthy after ${i}s"
                exit 0
              fi
              sleep 1
            done
            echo "Health check timed out after 30s — service likely failed to start"
            exit 1
          '