name: Sync public mirror
on:
  push:
    branches: [ main ]

jobs:
  sync:
    runs-on: ubuntu-latest
    steps:
      - name: Install tools (rsync)
        run: |
          sudo apt-get update && sudo apt-get install -y rsync

      - name: Checkout private repo
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Prepare SSH
        env:
          SSH_KEY: ${{ secrets.PUBLIC_REPO_SSH_KEY }}
        run: |
          set -euo pipefail
          mkdir -p ~/.ssh
          echo "$SSH_KEY" > ~/.ssh/id_sync
          chmod 600 ~/.ssh/id_sync
          printf 'Host 192.168.1.15\n  HostName 192.168.1.15\n  Port 22\n  User git\n  IdentityFile ~/.ssh/id_sync\n  IdentitiesOnly yes\n' >> ~/.ssh/config
          ssh-keyscan -p 22 192.168.1.15 >> ~/.ssh/known_hosts

      - name: Clone public repo
        run: |
          git clone --depth 1 ssh://git@192.168.1.15:22/Bausager/Flux-oss.git /tmp/public

      - name: Sync files (snapshot, safe)
        run: |
          rsync -a --delete \
            --exclude '.git' \
            --exclude '.gitea' \
            ./ /tmp/public/
          cd /tmp/public
          git config user.name  "Gitea CI"
          git config user.email "ci@bausager.org"
          if ! git diff --quiet; then
            git add -A
            git commit -m "Sync from Flux (private)"
            git push origin HEAD:main
          else
            echo "No changes to push."
          fi