name: CI/CD Pipeline (Zero Downtime - Fixed)

on:
  push:
    branches: [ production ]

env:
  NODE_VERSION: '20'
  DOCKER_IMAGE: portfolio-app

jobs:
  production:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Setup Node.js
        uses: actions/setup-node@v3
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'npm'

      - name: Install dependencies
        run: npm ci

      - name: Run linting
        run: npm run lint

      - name: Run tests
        run: npm run test

      - name: Build application
        run: npm run build

      - name: Run security scan
        run: |
          echo "🔍 Running npm audit..."
          npm audit --audit-level=high || echo "⚠️ Some vulnerabilities found, but continuing..."

      - name: Build Docker image
        run: |
          docker build -t ${{ env.DOCKER_IMAGE }}:latest .
          docker tag ${{ env.DOCKER_IMAGE }}:latest ${{ env.DOCKER_IMAGE }}:$(date +%Y%m%d-%H%M%S)

      - name: Verify secrets and variables before deployment
        run: |
          echo "🔍 Verifying secrets and variables..."
          
          # Check Variables
          if [ -z "${{ vars.NEXT_PUBLIC_BASE_URL }}" ]; then
            echo "❌ NEXT_PUBLIC_BASE_URL variable is missing!"
            exit 1
          fi
          if [ -z "${{ vars.MY_EMAIL }}" ]; then
            echo "❌ MY_EMAIL variable is missing!"
            exit 1
          fi
          if [ -z "${{ vars.MY_INFO_EMAIL }}" ]; then
            echo "❌ MY_INFO_EMAIL variable is missing!"
            exit 1
          fi
          
          # Check Secrets
          if [ -z "${{ secrets.MY_PASSWORD }}" ]; then
            echo "❌ MY_PASSWORD secret is missing!"
            exit 1
          fi
          if [ -z "${{ secrets.MY_INFO_PASSWORD }}" ]; then
            echo "❌ MY_INFO_PASSWORD secret is missing!"
            exit 1
          fi
          if [ -z "${{ secrets.ADMIN_BASIC_AUTH }}" ]; then
            echo "❌ ADMIN_BASIC_AUTH secret is missing!"
            exit 1
          fi
          
          echo "✅ All required secrets and variables are present"

      - name: Deploy with zero downtime using docker-compose
        run: |
          echo "🚀 Deploying with zero downtime using docker-compose..."
          
          # Export environment variables for docker compose
          export NODE_ENV="${{ vars.NODE_ENV }}"
          export LOG_LEVEL="${{ vars.LOG_LEVEL }}"
          export NEXT_PUBLIC_BASE_URL="${{ vars.NEXT_PUBLIC_BASE_URL }}"
          export NEXT_PUBLIC_UMAMI_URL="${{ vars.NEXT_PUBLIC_UMAMI_URL }}"
          export NEXT_PUBLIC_UMAMI_WEBSITE_ID="${{ vars.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}"
          export MY_EMAIL="${{ vars.MY_EMAIL }}"
          export MY_INFO_EMAIL="${{ vars.MY_INFO_EMAIL }}"
          export MY_PASSWORD="${{ secrets.MY_PASSWORD }}"
          export MY_INFO_PASSWORD="${{ secrets.MY_INFO_PASSWORD }}"
          export ADMIN_BASIC_AUTH="${{ secrets.ADMIN_BASIC_AUTH }}"
          
          # Check if nginx config file exists
          echo "🔍 Checking nginx configuration file..."
          if [ ! -f "nginx-zero-downtime.conf" ]; then
            echo "⚠️ nginx-zero-downtime.conf not found, creating fallback..."
            cat > nginx-zero-downtime.conf << 'EOF'
events {
    worker_connections 1024;
}
http {
    upstream portfolio_backend {
        server portfolio-app-1:3000 max_fails=3 fail_timeout=30s;
        server portfolio-app-2:3000 max_fails=3 fail_timeout=30s;
    }
    server {
        listen 80;
        server_name _;
        location /health {
            access_log off;
            return 200 "healthy\n";
            add_header Content-Type text/plain;
        }
        location / {
            proxy_pass http://portfolio_backend;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
        }
    }
}
EOF
          fi
          
          # Stop old containers
          echo "🛑 Stopping old containers..."
          docker compose -f docker-compose.zero-downtime-fixed.yml down || true
          
          # Clean up any orphaned containers
          echo "🧹 Cleaning up orphaned containers..."
          docker compose -f docker-compose.zero-downtime-fixed.yml down --remove-orphans || true
          
          # Start new containers
          echo "🚀 Starting new containers..."
          docker compose -f docker-compose.zero-downtime-fixed.yml up -d
          
          echo "✅ Zero downtime deployment completed!"
        env:
          NODE_ENV: ${{ vars.NODE_ENV }}
          LOG_LEVEL: ${{ vars.LOG_LEVEL }}
          NEXT_PUBLIC_BASE_URL: ${{ vars.NEXT_PUBLIC_BASE_URL }}
          NEXT_PUBLIC_UMAMI_URL: ${{ vars.NEXT_PUBLIC_UMAMI_URL }}
          NEXT_PUBLIC_UMAMI_WEBSITE_ID: ${{ vars.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}
          MY_EMAIL: ${{ vars.MY_EMAIL }}
          MY_INFO_EMAIL: ${{ vars.MY_INFO_EMAIL }}
          MY_PASSWORD: ${{ secrets.MY_PASSWORD }}
          MY_INFO_PASSWORD: ${{ secrets.MY_INFO_PASSWORD }}
          ADMIN_BASIC_AUTH: ${{ secrets.ADMIN_BASIC_AUTH }}

      - name: Wait for containers to be ready
        run: |
          echo "⏳ Waiting for containers to be ready..."
          sleep 20
          
          # Check if all containers are running
          echo "📊 Checking container status..."
          docker compose -f docker-compose.zero-downtime-fixed.yml ps
          
          # Wait for application containers to be healthy (internal check)
          echo "🏥 Waiting for application containers to be healthy..."
          for i in {1..30}; do
            # Check if both app containers are healthy internally
            if docker exec portfolio-app-1 curl -f http://localhost:3000/api/health > /dev/null 2>&1 && \
               docker exec portfolio-app-2 curl -f http://localhost:3000/api/health > /dev/null 2>&1; then
              echo "✅ Both application containers are healthy!"
              break
            fi
            echo "⏳ Waiting for application containers... ($i/30)"
            sleep 3
          done
          
          # Wait for nginx to be healthy and proxy to work
          echo "🌐 Waiting for nginx to be healthy and proxy to work..."
          for i in {1..30}; do
            # Check nginx health endpoint
            if curl -f http://localhost/health > /dev/null 2>&1; then
              echo "✅ Nginx health endpoint is working!"
              # Now check if nginx can proxy to the application
              if curl -f http://localhost/api/health > /dev/null 2>&1; then
                echo "✅ Nginx proxy to application is working!"
                break
              fi
            fi
            echo "⏳ Waiting for nginx and proxy... ($i/30)"
            sleep 3
          done

      - name: Health check
        run: |
          echo "🔍 Running comprehensive health checks..."
          
          # Check container status
          echo "📊 Container status:"
          docker compose -f docker-compose.zero-downtime-fixed.yml ps
          
          # Check individual application containers (internal)
          echo "🏥 Checking individual application containers..."
          if docker exec portfolio-app-1 curl -f http://localhost:3000/api/health; then
            echo "✅ portfolio-app-1 health check passed!"
          else
            echo "❌ portfolio-app-1 health check failed!"
            docker logs portfolio-app-1 --tail=20
            exit 1
          fi
          
          if docker exec portfolio-app-2 curl -f http://localhost:3000/api/health; then
            echo "✅ portfolio-app-2 health check passed!"
          else
            echo "❌ portfolio-app-2 health check failed!"
            docker logs portfolio-app-2 --tail=20
            exit 1
          fi
          
          # Check nginx health
          if curl -f http://localhost/health; then
            echo "✅ Nginx health check passed!"
          else
            echo "❌ Nginx health check failed!"
            docker logs portfolio-nginx --tail=20
            exit 1
          fi
          
          # Check application health through nginx (this is the main test)
          if curl -f http://localhost/api/health; then
            echo "✅ Application health check through nginx passed!"
          else
            echo "❌ Application health check through nginx failed!"
            echo "Nginx logs:"
            docker logs portfolio-nginx --tail=20
            exit 1
          fi
          
          # Check main page through nginx
          if curl -f http://localhost/ > /dev/null; then
            echo "✅ Main page is accessible through nginx!"
          else
            echo "❌ Main page is not accessible through nginx!"
            exit 1
          fi
          
          echo "✅ All health checks passed! Deployment successful!"

      - name: Show container status
        run: |
          echo "📊 Container status:"
          docker compose -f docker-compose.zero-downtime-fixed.yml ps

      - name: Cleanup old images
        run: |
          echo "🧹 Cleaning up old images..."
          docker image prune -f
          docker system prune -f
          echo "✅ Cleanup completed"