name: Publish to Harbor

on:
    push:
        branches:
            - "master"
    workflow_dispatch:

jobs:
    legacy-frontend:
        name: Build and push to Harbor
        runs-on: ubuntu-latest
        permissions:
            contents: read
        steps:
            - name: Checkout
              uses: actions/checkout@v4
              with:
                  submodules: "recursive"

            - name: Set up Docker Buildx
              uses: docker/setup-buildx-action@v3

            - name: Log in to Harbor
              uses: docker/login-action@v3
              with:
                  registry: registry.stoatinternal.com
                  username: ${{ secrets.HARBOR_USERNAME }}
                  password: ${{ secrets.HARBOR_PASSWORD }}

            - name: Build and push
              uses: docker/build-push-action@v6
              with:
                  context: .
                  push: true
                  tags: |
                      registry.stoatinternal.com/stoat/legacy-frontend:${{ github.sha }}
                      registry.stoatinternal.com/stoat/legacy-frontend:latest
                  build-args: |
                      REVOLT_PUBLIC_URL=https://api.stoat.chat/
                  cache-from: type=gha
                  cache-to: type=gha,mode=max