name: Vaultwarden CI/CD

on:
  push:
    paths:
      - "stacks/vaultwarden/**"
      - "scripts/deploy-vaultwarden.sh"
      - ".gitea/workflows/vaultwarden.yml"

  workflow_dispatch:

permissions:
  contents: read

jobs:
  vaultwarden:
    name: Validate and deploy Vaultwarden
    runs-on: docker-home-01
    steps:
      - name: Checkout repository
        uses: actions/checkout@v7
        with:
          persist-credentials: false
      - name: Deploy Vaultwarden
        if: ${{ gitea.ref == 'refs/heads/main' }}
        run: |
          ./scripts/deploy-vaultwarden.sh