name: "Build & Upload NixOS Proxmox Image"

on:
  push:
    tags:
      - "v*" # triggers on v1.0.0, v1.2.3, etc.
  workflow_dispatch:

jobs:
  build-upload:
    runs-on: nixos-latest
    env:
      PROXMOX_HOST: 192.168.1.205
      PROXMOX_USER: forgejo-runner
      TEMPLATE_VMID: 9001
      LATEST_TEMPLATE_VMID: 9000

    steps:
      - name: Install nodejs
        run: nix-env -iA nixpkgs.nodejs

      - name: Checkout repo
        uses: actions/checkout@v4

      - name: Set VERSION from tag or fallback
        run: |
          if [ -n "${CI_COMMIT_TAG}" ]; then
            echo "VERSION=${CI_COMMIT_TAG}" >> $GITHUB_ENV
          else
            echo "VERSION=dev-$(date +%s)" >> $GITHUB_ENV
          fi

      - name: Build NixOS image
        run: nix build .#base --builders "ssh://root@nixos-builder.lab x86_64-linux"

      - name: Prepare SSH
        env:
          PROXMOX_SSH_KEY: ${{ secrets.PROXMOX_SSH_KEY }}
        run: |
          mkdir -p ~/.ssh
          echo "$PROXMOX_SSH_KEY" > ~/.ssh/id_rsa
          chmod 600 ~/.ssh/id_rsa
          ssh-keyscan -H $PROXMOX_HOST >> ~/.ssh/known_hosts

      # - name: Upload image to Proxmox and manage templates
      #   run: |
      #     set -e
      #     IMAGE="result/vm-image.vma.zst"
      #     REMOTE_NAME="nixos-base-image-${VERSION}.vma.zst"
      #     REMOTE_PATH="/var/lib/vz/template/images/$REMOTE_NAME"

      #     echo "Uploading $IMAGE to Proxmox as $REMOTE_NAME"
      #     scp $IMAGE $PROXMOX_USER@$PROXMOX_HOST:$REMOTE_PATH

      #     echo "Restoring as VMID $TEMPLATE_VMID"
      #     ssh $PROXMOX_USER@$PROXMOX_HOST "
      #       qm destroy $TEMPLATE_VMID --purge || true
      #       qmrestore $REMOTE_PATH $TEMPLATE_VMID --unique
      #       qm template $TEMPLATE_VMID

      #       echo 'Cloning to $LATEST_TEMPLATE_VMID as latest'
      #       qm destroy $LATEST_TEMPLATE_VMID --purge || true
      #       qm clone $TEMPLATE_VMID $LATEST_TEMPLATE_VMID --name nixos-base-latest
      #     "

      # - name: Prune old templates
      #   run: |
      #     ssh $PROXMOX_USER@$PROXMOX_HOST "
      #       cd /var/lib/vz/template/images
      #       ls -tp nixos-base-image-*.vma.zst | grep -v '/$' | tail -n +6 | xargs -r rm --
      #     "

      # - name: Create Forgejo Release (optional)
      #   if: ${{ github.ref_type == 'tag' }}
      #   uses: softprops/action-gh-release@v1
      #   with:
      #     name: "NixOS Base Image ${{ env.VERSION }}"
      #     tag_name: ${{ env.VERSION }}
      #     body: |
      #       This release contains the NixOS base image for Proxmox labeled `${{ env.VERSION }}`.
      #     files: |
      #       result/vm-image.vma.zst