name: Documentation Build

on:
  push:
    paths:
      - "docs/**"
      - "stacks/**"
      - "ansible/inventory/**"
      - "mkdocs.yml"
      - "scripts/docs-build.sh"
  workflow_dispatch:

jobs:
  generate-and-build:
    name: Generate + build docs
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"

      - name: Install dependencies
        run: |
          pip install mkdocs mkdocs-material mkdocs-awesome-pages-plugin
          pip install jinja2 pyyaml

      - name: Generate dynamic content
        run: ./scripts/docs-build.sh --generate-only

      - name: Build internal docs
        run: mkdocs build --config-file docs/mkdocs.yml --site-dir site/internal

      - name: Build external docs
        run: mkdocs build --config-file docs/mkdocs-external.yml --site-dir site/external

      - name: Deploy internal docs
        if: github.ref == 'refs/heads/main'
        # Deploy to Gitea Pages or internal server — configure PAGES_URL in secrets
        env:
          PAGES_SSH_KEY: ${{ secrets.PAGES_SSH_KEY }}
          PAGES_HOST: ${{ secrets.PAGES_HOST }}
          PAGES_PATH: ${{ secrets.PAGES_PATH_INTERNAL }}
        run: |
          if [ -n "$PAGES_SSH_KEY" ]; then
            install -m 600 /dev/null /tmp/pages_key
            echo "$PAGES_SSH_KEY" > /tmp/pages_key
            rsync -avz --delete -e "ssh -i /tmp/pages_key -o StrictHostKeyChecking=no" \
              site/internal/ "${PAGES_HOST}:${PAGES_PATH}/"
          else
            echo "PAGES_SSH_KEY not configured — skipping deploy"
          fi

      - name: Upload docs artifacts
        uses: actions/upload-artifact@v4
        with:
          name: docs-site
          path: site/
          retention-days: 7