# 💡 全局变量块 46
variables:
  - &APP_REGISTRY "push.lovestory.cyou"
  - &APP_PULL_REGISTRY "registry.lovestory.cyou"
  - &PROJECT_NAME "abhors/demo"
  - &CONTAINER_NAME "demo-container"
  - &DEPLOY_HOST "43.143.243.136"
  - &DEPLOY_PORT "22"
  - &DEPLOY_USER_SECRET "136_ssh_user"
  - &DEPLOY_PASS_SECRET "136_ssh_password"

steps:
  - name: Java 构建
    image: library/maven:3.9.6-eclipse-temurin-17
    pull: true
    commands:
      - mvn clean package -DskipTests
    volumes:
      - /tmp/maven-cache:/root/.m2
    when:
      event: [push, pull_request]
      branch: master

  - name: 镜像构建与推送
    image: woodpeckerci/plugin-docker-buildx:latest
    privileged: true
    # ❌ 删除了这里的 environment 块，避免与 settings 冲突
    settings:
      #  直接使用 YAML 锚点组合成完整的 repo 地址
      repo: push.lovestory.cyou/abhors/demo
      # 💡 文档高级配置：通知内部 dockerd 引擎全面放开对不安全 HTTP 仓库的拦截
      insecure: true
      registry: *APP_REGISTRY
      username:
        from_secret: nexus_docker_username
      password:
        from_secret: nexus_docker_password
      mirror: http://registry.lovestory.cyou
    when:
      event: push
      branch: master

  - name: 远程终端部署
    image: registry.lovestory.cyou/appleboy/drone-ssh:latest
    settings:
      host: *DEPLOY_HOST
      port: *DEPLOY_PORT
      username:
        from_secret: *DEPLOY_USER_SECRET
      password:
        from_secret: *DEPLOY_PASS_SECRET
      secrets: [ nexus_docker_username, nexus_docker_password ]
      envs: [ nexus_docker_username, nexus_docker_password ]
      script:
        - echo "========================================="
        - echo "🚀 开始部署节点：*DEPLOY_HOST"
        - echo "========================================="
        - docker login --username "$nexus_docker_username" --password "$nexus_docker_password" "registry.lovestory.cyou"
        - docker stop "demo-container" || true
        - docker rm "demo-container" || true
        - docker pull "registry.lovestory.cyou/abhors/demo:latest"
        - docker run -d --name "demo-container" -p 8080:8080 --restart always "registry.lovestory.cyou/abhors/demo:latest"
    when:
      event: push
      branch: master