name: build

on:
  push:
    branches:
      - main

jobs:
  build-and-push:
    runs-on: kaniko
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Build & Push con Kaniko
        env:
          NEXUS_USER: ${{ secrets.NEXUS_USER }}
          NEXUS_PASSWORD: ${{ secrets.NEXUS_PASSWORD }}
        run: |
          echo "🔐 Configurando credenciales del registry"
          mkdir -p /kaniko/.docker

          AUTH="$(echo -n "$NEXUS_USER:$NEXUS_PASSWORD" | base64)"

          cat > /kaniko/.docker/config.json <<EOF
          {
            "auths": {
              "nexus.rancherk3.duckdns.org": {
                "auth": "$AUTH"
              }
            }
          }
          EOF

          echo "🚀 Construyendo y subiendo imagen con Kaniko"
          /kaniko/executor \
            --context=. \
            --dockerfile=Dockerfile \
            --destination=nexus.rancherk3.duckdns.org/tfm/microserviciospython:latest \
            --destination=nexus.rancherk3.duckdns.org/tfm/microserviciospython:${{ gitea.sha }} \
            --cache=true \
            --cache-ttl=72h \
            --verbosity=info

          echo "✅ Build finalizado"