website/.github/workflows/default.yaml

name: Deploy to SFTP Server

on:
  push:
    branches: [main]

permissions:
  contents: read
  pages: write
  id-token: write

jobs:
  build:
    env:
      RUNNER_TOOL_CACHE: '/toolcache'
    runs-on: ubuntu-latest
    container: git.max-richter.dev/max/website:latest
    steps:
      - name: 🔄 Checkout code
        uses: actions/checkout@v3

      - name: Debug SSH Env vars
        run: |
          echo "SSH_HOST=$SSH_HOST"
          echo "SSH_PORT=$SSH_PORT"
          echo "SSH_USER=$SSH_USER"
          echo "REMOTE_DIR=$REMOTE_DIR"

      - name: 🔢 Calculate cache IDs
        run: |
          # Calculate cache IDs for Git LFS and PNPM
          git lfs ls-files -l | cut -d' ' -f1 | sort > .lfs-assets-id
          LFS_CACHE_ID=$(cat .lfs-assets-id | md5sum)-v1
          PNPM_CACHE_ID=$(cat pnpm-lock.yaml | md5sum)-v1
          echo "LFS_CACHE_ID=$LFS_CACHE_ID" >> $GITHUB_ENV
          echo "PNPM_STORE_PATH=$(pnpm store path)" >> $GITHUB_ENV
          echo "PNPM_CACHE_ID=$PNPM_CACHE_ID" >> $GITHUB_ENV

      - name: 🗄️ Cache Git LFS objects
        uses: actions/cache@v4
        with:
          path: .git/lfs
          key: ${{ runner.os }}-lfs-${{ env.LFS_CACHE_ID }}

      - name: 🛠️ Cache PNPM dependencies
        uses: actions/cache@v4
        with:
          path: ${{ env.PNPM_STORE_PATH }}
          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}

      - name: 📷 Cache Astro Images
        uses: actions/cache@v4
        with:
          path: node_modules/.astro
          key: ${{ runner.os }}-astro-v1

      - name: 🔄 Pull Git LFS files
        run: git lfs pull

      - name: 🏗️ Build site
        run: |
          # Install dependencies, build, and generate site output
          pnpm i && pnpm build

      - name: 🔑 Set up SSH Key
        run: |
          eval `ssh-agent -s`
          echo "$SSH_PRIVATE_KEY" > /tmp/id_rsa
          chmod 600 /tmp/id_rsa
          ssh-add /tmp/id_rsa
        env:
          SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}

      - name: 🚀 Deploy Changed Files via rsync
        run: |
          rsync -avz -e "ssh -p ${SSH_PORT}" ./dist/ ${SSH_USER}@${SSH_HOST}:${REMOTE_DIR}