name: Build and Push Docker Image

on:
workflow_dispatch:
push:
branches:
- main
paths:
- 'app.py'
- 'dockerfile'
- 'requirements.txt'
- 'docker-compose.yml'

jobs:
build-and-push:
runs-on: ubuntu-latest
permissions:
contents: read
packages: write

steps:
  - name: Checkout repository
    uses: actions/checkout@v4

  - name: Set registry URL
    id: registry
    run: |
      # The registry URL for Gitea is the server URL without the scheme (https://)
      if [ "${{ github.server_url }}" = "https://github.com" ]; then
        echo "url=ghcr.io" >> $GITHUB_OUTPUT
      else
        # Remove 'https://' prefix for the Docker registry hostname
        echo "url=$(echo ${{ github.server_url }} | sed 's|^https://||')" >> $GITHUB_OUTPUT
      fi

  - name: Set up QEMU
    uses: docker/setup-qemu-action@v3

  - name: Log in to Container Registry
    uses: docker/login-action@v3
    with:
      registry: ${{ steps.registry.outputs.url }}
      username: ${{ github.actor }}
      # Use GITEA_TOKEN (or a generic token) for authentication
      password: ${{ secrets.PACKAGE_TOKEN || secrets.GITHUB_TOKEN }}

  - name: Set up Docker Buildx
    uses: docker/setup-buildx-action@v3

  - name: Build and push multi-arch Docker image
    uses: docker/build-push-action@v5
    with:
      context: .
      push: true
      platforms: linux/amd64,linux/arm64
      tags: |
        ${{ steps.registry.outputs.url }}/${{ github.repository }}:latest
        ${{ steps.registry.outputs.url }}/${{ github.repository }}:${{ github.sha }}
      cache-from: type=gha
      cache-to: type=gha,mode=max
      
      # --- AUTOMATIC REPOSITORY LINKING ---
      # This label adds an OCI annotation that Gitea uses to automatically
      # link the package to the repository source code.
      labels: |
        org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}