when:
  - branch: master
    event: [push, pull_request]

depends_on:
  - build

clone:
  git:
    image: woodpeckerci/plugin-git
    settings:
      recursive: true
      # TODO: extend this to use an image that has our root certificate baked in
      skip-verify: true

steps:
  darkdork.dev:
    image: cr.forge.lan/alk8s/alk8s
    pull: true
    environment:
        KUBECONFIG_BASE64:
          from_secret: kubeconfig_base64
        CI_COMMIT_SHA: ${CI_COMMIT_SHA}
    commands:
      - mkdir -p ~/.kube
      - echo $KUBECONFIG_BASE64 | base64 -d > ~/.kube/config
      - pwd
      - kubectl apply -Rf manifests/darkdork.dev
  postgres:
    image: cr.forge.lan/alk8s/alk8s
    pull: true
    environment:
        KUBECONFIG_BASE64:
          from_secret: kubeconfig_base64
        CI_COMMIT_SHA: ${CI_COMMIT_SHA}
    commands:
      - mkdir -p ~/.kube
      - echo $KUBECONFIG_BASE64 | base64 -d > ~/.kube/config
      - pwd
      - kubectl apply -Rf manifests/postgres
  minio:
    image: cr.forge.lan/alk8s/alk8s
    pull: true
    environment:
        KUBECONFIG_BASE64:
          from_secret: kubeconfig_base64
        CI_COMMIT_SHA: ${CI_COMMIT_SHA}
    commands:
      - mkdir -p ~/.kube
      - echo $KUBECONFIG_BASE64 | base64 -d > ~/.kube/config
      - pwd
      - kubectl apply -Rf manifests/minio
  tor:
    image: cr.forge.lan/alk8s/alk8s
    pull: true
    environment:
        KUBECONFIG_BASE64:
          from_secret: kubeconfig_base64
        CI_COMMIT_SHA: ${CI_COMMIT_SHA}
    commands:
      - mkdir -p ~/.kube
      - echo $KUBECONFIG_BASE64 | base64 -d > ~/.kube/config
      - pwd
      - kubectl apply -Rf manifests/tor
      - envsubst < manifests/tor/deployment.yaml.template | kubectl apply -f -
  privoxy:
    image: cr.forge.lan/alk8s/alk8s
    pull: true
    environment:
        KUBECONFIG_BASE64:
          from_secret: kubeconfig_base64
        CI_COMMIT_SHA: ${CI_COMMIT_SHA}
    commands:
      - mkdir -p ~/.kube
      - echo $KUBECONFIG_BASE64 | base64 -d > ~/.kube/config
      - pwd
      - kubectl apply -Rf manifests/privoxy
      - envsubst < manifests/privoxy/deployment.yaml.template | kubectl apply -f -
  pleroma:
    image: cr.forge.lan/alk8s/alk8s:latest
    pull: true
    environment:
        KUBECONFIG_BASE64:
          from_secret: kubeconfig_base64
        CI_COMMIT_SHA: ${CI_COMMIT_SHA}
    commands:
      - mkdir -p ~/.kube
      - echo $KUBECONFIG_BASE64 | base64 -d > ~/.kube/config
      - pwd
      - kubectl -Rf manifests/pleroma
      - envsubst < manifests/pleroma/deployment.yaml.template | kubectl apply -f -