#!/usr/bin/env bash
set -Eeuo pipefail
trap 'echo "[deploy-db] failed at line $LINENO"; exit 1' ERR

# Требуем ключевые переменные уже ПРОБРОШЕННЫЕ из шага CI
: "${REMOTE_BASE:?missing REMOTE_BASE}"
: "${DB_DIR:?missing DB_DIR}"
: "${SSH_USER:?missing SSH_USER}"
: "${SSH_HOST:?missing SSH_HOST}"

REMOTE_DIR="${REMOTE_BASE%/}/${DB_DIR}"
REMOTE_TARGET="${SSH_USER}@${SSH_HOST}"
SSH_OPTS=(-i /root/.ssh/id_rsa -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o BatchMode=yes -vv)

echo "[local] REMOTE_DIR=${REMOTE_DIR} REMOTE_TARGET=${REMOTE_TARGET}"

# Кто мы на удалёнке (оставляет след в логе CI)
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" 'echo "[whoami] $(whoami) @ $(hostname) $(date -Is)"'

# Создание директорий и синк
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" "mkdir -p ${REMOTE_DIR}/{compose,env}"
rsync -avz --delete -e "ssh ${SSH_OPTS[*]}" ci/prod/compose/      "$REMOTE_TARGET:${REMOTE_DIR}/compose/"
rsync -avz             -e "ssh ${SSH_OPTS[*]}" ci/prod/.env.runtime "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.runtime"

# Контрольная сумма — доказательство доставки
local_sum="$(sha256sum ci/prod/compose/db.yml | awk '{print $1}')"
remote_sum="$(ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" "sha256sum ${REMOTE_DIR}/compose/db.yml | awk '{print \$1}'")"
echo "[sha256] local=$local_sum remote=$remote_sum"

# Деплой на удалёнке (ВАЖНО: 'bash -s', чтобы heredoc выполнился)
ssh "${SSH_OPTS[@]}" "$REMOTE_TARGET" REMOTE_DIR="$REMOTE_DIR" bash -s <<'EOSSH'
set -Eeuxo pipefail
echo "[remote] whoami=$(whoami) host=$(hostname) pwd=$PWD"
cd "${REMOTE_DIR}/compose"
set -a
. ../env/.env.runtime
set +a
docker compose -f db.yml pull
docker compose -f db.yml up -d --remove-orphans
docker compose ps
date -Is | tee .last_deploy
logger -t deploy-db "db deployed at $(date -Is) in ${REMOTE_DIR}"
EOSSH