name: HAProxy CI/CD

on:
  push:
    paths:
      - "stacks/haproxy/**"
      - "scripts/validate-haproxy.sh"
      - "scripts/deploy-haproxy.sh"
      - ".gitea/workflows/haproxy.yml"

  workflow_dispatch:

permissions:
  contents: read

jobs:

  haproxy:

    name: Validate and deploy HAProxy

    runs-on: docker-home-01

    steps:

      - name: Checkout repository
        uses: actions/checkout@v7
        with:
          persist-credentials: false

      - name: Validate configuration
        run: |
          ./scripts/validate-haproxy.sh

      - name: Deploy to production
        if: ${{ gitea.ref == 'refs/heads/main' }}
        run: |
          ./scripts/deploy-haproxy.sh