name: Keycloak CI/CD

on:
  push:
    paths:
      - "stacks/keycloak/**"
      - "scripts/deploy-keycloak.sh"
      - ".gitea/workflows/keycloak.yml"

  workflow_dispatch:

permissions:
  contents: read


jobs:

  keycloak:

    name: Deploy Keycloak

    runs-on: docker-home-01

    steps:

      - name: Checkout repository
        uses: actions/checkout@v7
        with:
          persist-credentials: false

      - name: Deploy Keycloak
        if: ${{ gitea.ref == 'refs/heads/main' }}
        run: |
          ./scripts/deploy-keycloak.sh