docker-server.yml

name: docker-server

on:
    push:
      branches:
        - feature/*
      paths:
        - server/**
    # Trigger without any parameters a proactive rebuild
    workflow_dispatch: {}
    workflow_call:

env:
    REGISTRY: ghcr.io
    IMAGE_NAME: ${{ github.repository }}

jobs:
    server:
        runs-on: ubuntu-latest
        # https://docs.github.com/en/actions/reference/authentication-in-a-workflow
        permissions:
            id-token: write
            packages: write
            contents: read
        timeout-minutes: 120
        steps:
            - name: Checkout repository
              id: checkout
              uses: actions/checkout@v4

            - name: Install Docker BuildX
              uses: docker/setup-buildx-action@v2
              id: buildx
              with:
                  install: true

            # Login against a Docker registry except on PR
            # https://github.com/docker/login-action
            - name: Log into registry ${{ env.REGISTRY }}
              # Ensure this doesn't trigger on PR's
              if: github.event_name != 'pull_request'
              uses: docker/login-action@v2
              with:
                  registry: ${{ env.REGISTRY }}
                  username: ${{ github.actor }}
                  password: ${{ secrets.GITHUB_TOKEN }}

            # Extract metadata (tags, labels) for Docker
            # https://github.com/docker/metadata-action
            - name: Extract Docker metadata
              id: meta
              uses: docker/metadata-action@v4
              with:
                  images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

            # Creates an additional 'latest' or 'nightly' tag
            # If the job is triggered via cron schedule, tag nightly and nightly-{SHA}
            # If the job is triggered via workflow dispatch and on a master branch, tag branch and latest
            # Otherwise, just tag as the branch name
            - name: Finalize Docker Metadata
              id: docker_tagging
              run: |
                  if [[ "${{ github.event_name }}" == 'schedule' ]]; then
                    echo "cron trigger, assigning nightly tag"
                    echo "docker_tags=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:server-nightly,${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:server-nightly-${GITHUB_SHA}" >> $GITHUB_OUTPUT
                  elif [[ "${GITHUB_REF##*/}" == "main" ]] || [[ ${GITHUB_REF##*/} == "master" ]]; then
                    echo "manual trigger from master/main branch, assigning latest tag"
                    echo "docker_tags=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:server-${GITHUB_REF##*/},${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:server-latest" >> $GITHUB_OUTPUT
                  else
                    echo "Neither scheduled nor manual release from main branch. Just tagging as branch name"
                    echo "docker_tags=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:server-${GITHUB_REF##*/}" >> $GITHUB_OUTPUT
                  fi

            # Log docker metadata to explicitly know what is being pushed
            - name: Inspect Docker Metadata
              run: |
                  echo "TAGS -> ${{ steps.docker_tagging.outputs.docker_tags }}"
                  echo "LABELS ->  ${{ steps.meta.outputs.labels }}"

            # Build and push Docker image
            # https://github.com/docker/build-push-action
            # https://github.com/docker/build-push-action/blob/master/docs/advanced/cache.md
            - name: Build and push Docker image
              uses: docker/build-push-action@v3
              with:
                  context: .
                  file: server/Dockerfile
                  push: true
                  tags: ${{ steps.docker_tagging.outputs.docker_tags }}
                  labels: ${{ steps.meta.outputs.labels }}
                  cache-from: type=gha
                  cache-to: type=gha,mode=max
                  build-args: |
                      BUILDTIME=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.created'] }}
                      VERSION=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.version'] }}
                      REVISION=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.revision'] }}