---
kind: pipeline
type: docker
name: docker-build-and-push

trigger:
  branch:
    - main

steps:
  - name: build site
    # https://hub.docker.com/r/library/docker
    image: hub.docker.struchkov.dev/docker:27.1.2-dind-alpine3.20
    commands:
      - docker run -v ./.quartz/quartz.config.ts:/usr/src/app/quartz.config.ts -v .:/usr/src/app/content -v ./public:/usr/src/app/public --rm docker.struchkov.dev/quartz:latest build
  - name: publish to server
    image: hub.docker.struchkov.dev/docker:27.1.2-dind-alpine3.20
    environment:
      SSH_DEPLOY_KEY:
        from_secret: SSH_DEPLOY_KEY
      SSH_DEPLOY_HOST:
        from_secret: SSH_DEPLOY_HOST
      SSH_DEPLOY_PORT:
        from_secret: SSH_DEPLOY_PORT
      SSH_DEPLOY_PATH:
        from_secret: SSH_DEPLOY_PATH
      SSH_DEPLOY_USER:
        from_secret: SSH_DEPLOY_USER
    commands:
      - eval $(ssh-agent -s)
      - mkdir -p ~/.ssh
      - echo "$SSH_DEPLOY_KEY" >> ~/.ssh/id_rsa
      - chmod 700 ~/.ssh
      - chmod 600 ~/.ssh/id_rsa
      - ssh-keyscan -p $SSH_DEPLOY_PORT $SSH_DEPLOY_HOST >> ~/.ssh/known_hosts
      - chmod 644 ~/.ssh/known_hosts
      - scp -r -P $SSH_DEPLOY_PORT ./* $SSH_DEPLOY_USER@$SSH_DEPLOY_HOST:$SSH_DEPLOY_PATH


# drone sign --save upagge/digital-garden
---
kind: signature
hmac: b7f8b00f7df64952e737ae78232a8fa40e89c10ab5ea6f3d2adcb1ba6da564b8

...