on:
  push:
    branches:
      - main

env:
  REMOTE: ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}
  PORT: ${{ secrets.SSH_PORT }}

jobs:
  deploy:
    runs-on: docker
    steps:
      - name: Set up SSH keys
        run: |
          mkdir -m 700 -p ~/.ssh
          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_deploy
          chmod 600 ~/.ssh/id_deploy

      - name: Pull latest branch to production
        run: |
          ssh-keyscan -p $PORT ${{ secrets.SSH_HOST }} >> ~/.ssh/known_hosts
          ssh ${{ secrets.USER }}@${{ secrets.SSH_HOST }} -p $PORT <<EOF
          cd ${{ secrets.SSH_DIRECTORY }}
          git pull
          EOF