# 第 74 次部署
# 💡 全局变量块
variables:
  - &APP_REGISTRY "push.lovestory.cyou"
  - &APP_PULL_REGISTRY "registry.lovestory.cyou"
  - &PROJECT_NAME "abhors/demo"
  - &CONTAINER_NAME "demo-container"
  - &DEPLOY_HOST "43.143.243.136"
  - &DEPLOY_PORT "22"
  - &DEPLOY_USER_SECRET "136_ssh_user"
  - &DEPLOY_PASS_SECRET "136_ssh_password"

steps:
  - name: Java 构建
    image: library/maven:3.9.6-eclipse-temurin-17
    pull: true
    commands:
      - mvn clean package -DskipTests
    volumes:
      - /tmp/maven-cache:/root/.m2
    when:
      event: [push, pull_request]
      branch: master

  - name: 官方标准构建与推送 (DinD)
    image: woodpeckerci/plugin-docker-buildx:latest-insecure
    privileged: true
    settings:
      repo: push.lovestory.cyou/abhors/demo
      registry: push.lovestory.cyou
      insecure: true
      username:
        from_secret: nexus_docker_username
      password:
        from_secret: nexus_docker_password
      output: type=image,push=true

      # 💡 官方高级设置：唯一承认的加速器参数，名字就叫 mirror
      # 这行会让插件拼接出 dockerd --registry-mirror=... 从而秒拉底座，不再超时
      mirror: http://registry.lovestory.cyou

      # 💡 内部 BuildKit 编译器的加速器配置
      # 确保第二步解析 Dockerfile 里的 FROM 基础镜像时走国内源
      buildkit_config: |
        [registry."docker.io"]
          mirrors = ["docker.1ms.run", "dockerpull.org", "1ms.run"]
        [registry."push.lovestory.cyou"]
          http = true
          insecure = true
    when:
      event: push
      branch: master

  - name: 远程终端部署
    image: push.lovestory.cyou/appleboy/drone-ssh:latest
    settings:
      host: *DEPLOY_HOST
      port: *DEPLOY_PORT
      username:
        from_secret: *DEPLOY_USER_SECRET
      password:
        from_secret: *DEPLOY_PASS_SECRET
      secrets: [ nexus_docker_username, nexus_docker_password ]
      envs: [ nexus_docker_username, nexus_docker_password ]
      script:
        - echo "========================================="
        - echo "🚀 开始部署节点：*DEPLOY_HOST"
        - echo "========================================="
        - docker login --username "$nexus_docker_username" --password "$nexus_docker_password" "push.lovestory.cyou"
        - docker stop "demo-container" || true
        - docker rm "demo-container" || true
        - docker pull "push.lovestory.cyou/abhors/demo:latest"
        - docker run -d --name "demo-container" -p 8080:8080 --restart always "push.lovestory.cyou/abhors/demo:latest"
    when:
      event: push
      branch: master