name: Build Yohaku Image

on:
  push:
    branches: [main]
  workflow_dispatch:
    inputs:
      force_rebuild:
        description: Rebuild even when this source commit is already published
        type: boolean
        required: false
        default: false
  schedule:
    # 03:00 Asia/Shanghai (GitHub cron uses UTC).
    - cron: '0 19 * * *'

permissions:
  contents: read
  packages: write

concurrency:
  group: yohaku-image
  cancel-in-progress: false

env:
  IMAGE: ghcr.io/{改为你自己的用户名}/yohaku
  SOURCE_REPO: innei-dev/yohaku

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout Yohaku source
        uses: actions/checkout@v6
        with:
          repository: ${{ env.SOURCE_REPO }}
          token: ${{ secrets.SOURCE_PAT }}
          path: source
          fetch-depth: 0
          lfs: true
          submodules: recursive
          persist-credentials: false

      - name: Read source version
        id: source
        working-directory: source
        run: |
          echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
          echo "short_sha=$(git rev-parse --short=12 HEAD)" >> "$GITHUB_OUTPUT"

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4

      - name: Log in to GHCR
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Check for an existing source image
        id: image
        env:
          FORCE_REBUILD: ${{ inputs.force_rebuild || false }}
          SOURCE_TAG: ${{ env.IMAGE }}:sha-${{ steps.source.outputs.short_sha }}
        run: |
          if [[ "$FORCE_REBUILD" == "true" ]]; then
            echo "should_build=true" >> "$GITHUB_OUTPUT"
            echo "A forced rebuild was requested for $SOURCE_TAG."
          elif docker buildx imagetools inspect "$SOURCE_TAG" >/dev/null 2>&1; then
            echo "should_build=false" >> "$GITHUB_OUTPUT"
            echo "$SOURCE_TAG already exists; skipping the Docker build."
          else
            echo "should_build=true" >> "$GITHUB_OUTPUT"
            echo "$SOURCE_TAG does not exist; starting the Docker build."
          fi

      - name: Build and push image
        if: steps.image.outputs.should_build == 'true'
        uses: docker/build-push-action@v7
        with:
          context: ./source
          file: ./source/Dockerfile
          platforms: linux/amd64
          push: true
          pull: true
          tags: |
            ${{ env.IMAGE }}:latest
            ${{ env.IMAGE }}:sha-${{ steps.source.outputs.short_sha }}
          labels: |
            org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
            org.opencontainers.image.revision=${{ steps.source.outputs.sha }}
            org.opencontainers.image.title=Yohaku
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Point latest to the existing image
        if: steps.image.outputs.should_build == 'false'
        env:
          SOURCE_TAG: ${{ env.IMAGE }}:sha-${{ steps.source.outputs.short_sha }}
        run: docker buildx imagetools create --tag "${IMAGE}:latest" "$SOURCE_TAG"

# Shared env block — mx-migrate boots a full Nest context (it now runs the
# combined schema + app-data migration phases), so it must receive the same
# config the runtime app needs (Redis, snowflake worker id, jwt secret, …).
x-mx-env: &mx-env
  TZ: Asia/Shanghai
  NODE_ENV: production
  REDIS_HOST: redis
  PG_HOST: postgres
  PG_PORT: "5432"
  PG_USER: mx
  PG_PASSWORD: mx
  PG_DATABASE: mx_core
  SNOWFLAKE_WORKER_ID: "1"
  JWT_SECRET: #长度 16-32 个字符，用于加密用户 JWT，务必保存好不要泄露。
  ALLOWED_ORIGINS: blog.wdf.li #改为自己的博客地址
  ENCRYPT_ENABLE: false #选择是否开启加密
  ENCRYPT_KEY:  #开启加密后必填，长度必须为 64 位且只有小写字母和数字，可用 openssl rand -hex 32 生成。
  NEXT_PUBLIC_API_URL: https://blog.wdf.li/api/v3 #把域名改为你自己的域名
  NEXT_PUBLIC_GATEWAY_URL: https://blog.wdf.li #把域名改为你自己的域名
  API_URL: http://mx-server:2333/api/v3 

services:
  app:
    container_name: mx-server
    image: innei/mx-server:latest
    environment: *mx-env
    volumes:
      - ./data/mx-space:/root/.mx-space
    ports:
      - '127.0.0.1:2333:2333'
    depends_on:
      mx-migrate:
        condition: service_completed_successfully
      redis:
        condition: service_started
    networks:
      - mx-space
    restart: unless-stopped
    healthcheck:
      test: [CMD, curl, -f, 'http://127.0.0.1:2333/api/v3/ping']
      interval: 1m30s
      timeout: 30s
      retries: 5
      start_period: 30s
  yohaku:
    image: ghcr.io/creeper2020/yohaku:latest
    container_name: yohaku
    restart: unless-stopped
    environment: *mx-env
    networks:
      - mx-space
    ports:
      - '127.0.0.1:2323:2323'

  # One-shot release-phase migration runner. Runs schema migrations (drizzle)
  # then app-data migrations (Nest-bootstrapped registry). Exits 0; the `app`
  # service waits for completion via `service_completed_successfully` before
  # starting. See docs/superpowers/specs/2026-05-05-database-migration-release-phase-design.md.
  mx-migrate:
    container_name: mx-migrate
    image: innei/mx-server:latest
    command: ['node', 'migrate.mjs']
    environment: *mx-env
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_started
    networks:
      - mx-space
    restart: 'no'

  postgres:
    container_name: postgres
    image: postgres:16-alpine
    environment:
      - POSTGRES_USER=mx
      - POSTGRES_PASSWORD=mx
      - POSTGRES_DB=mx_core
    volumes:
      - ./data/postgres:/var/lib/postgresql/data
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U mx -d mx_core']
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 10s
    networks:
      - mx-space
    restart: unless-stopped

  redis:
    image: redis:alpine
    container_name: redis
    volumes:
      - ./data/redis:/data
    healthcheck:
      test: [CMD-SHELL, 'redis-cli ping | grep PONG']
      start_period: 20s
      interval: 30s
      retries: 5
      timeout: 3s
    networks:
      - mx-space
    restart: unless-stopped

networks:
  mx-space:
    driver: bridge

docker compose up -d

server {
    listen 80;
    listen 443 ssl http2;
    server_name www.example.com;
    index index.html;

    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Host $server_name;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";

    location /socket.io {
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass http://127.0.0.1:2333/socket.io;
    }

    location /api/v3 {
        proxy_pass http://127.0.0.1:2333/api/v3;
    }

    location /render {
        proxy_pass http://127.0.0.1:2333/render;
    }

    location / {
        proxy_pass http://127.0.0.1:2323;
    }

    location /qaqdmin {
        proxy_pass http://127.0.0.1:2333/proxy/qaqdmin;
    }

    location /proxy {
        proxy_pass http://127.0.0.1:2333/proxy;
    }

    ssl_certificate /path/to/fullchain.pem;
    ssl_certificate_key /path/to/privkey.pem;
    ssl_protocols TLSv1.3 TLSv1.2;
    error_page 497 https://$host$request_uri;
}

{
  "footer": {
    "otherInfo": {
      "date": "2020-{{now}}",
      "icp": {
        "text": "萌 ICP 备 20236136 号",
        "link": "https://icp.gov.moe/?keyword=20236136"
      }
    },
    "linkSections": [
      {
        "name": "关于",
        "links": [
          { "name": "关于本站", "href": "/about-site" },
          { "name": "关于我", "href": "/about" },
          {
            "name": "关于此项目",
            "href": "https://github.com/Innei/Yohaku",
            "external": true
          }
        ]
      },
      {
        "name": "更多",
        "links": [
          { "name": "时间线", "href": "/timeline" },
          { "name": "友链", "href": "/friends" }
        ]
      },
      {
        "name": "联系",
        "links": [
          { "name": "写留言", "href": "/message" },
          { "name": "GitHub", "href": "https://github.com/innei", "external": true }
        ]
      }
    ]
  },
  "config": {
    "color": {
      "light": ["#33A6B8", "#FF6666", "#26A69A", "#fb7287", "#69a6cc"],
      "dark": ["#F596AA", "#A0A7D4", "#ff7b7b", "#99D8CF", "#838BC6"]
    },
    "site": {
      "favicon": "/favicon.svg",
      "faviconDark": "/favicon-dark.svg"
    },
    "hero": {
      "title": {
        "template": [
          {
            "type": "span",
            "text": "Hi, I'm ",
            "style": { "fontWeight": 300, "opacity": 0.85 }
          },
          {
            "type": "span",
            "text": "Innei",
            "style": {
              "fontWeight": 500,
              "color": "var(--color-accent)",
              "letterSpacing": "-0.02em"
            }
          },
          {
            "type": "span",
            "text": " 👋",
            "style": {
              "fontWeight": 300,
              "display": "inline-block",
              "transform": "rotate(-8deg)"
            }
          },
          { "type": "br" },
          {
            "type": "span",
            "text": "A NodeJS Full Stack ",
            "style": { "fontWeight": 300, "opacity": 0.8 }
          },
          {
            "type": "code",
            "text": "<Developer />",
            "style": {
              "display": "inline-block",
              "fontFamily": "var(--font-mono)",
              "fontSize": "0.72em",
              "fontWeight": 500,
              "padding": "0.25em 0.55em",
              "borderRadius": "0.35em",
              "backgroundColor": "color-mix(in srgb, var(--color-accent) 10%, transparent)",
              "color": "var(--color-accent)",
              "border": "1px solid color-mix(in srgb, var(--color-accent) 22%, transparent)"
            }
          },
          {
            "type": "span",
            "style": {
              "display": "inline-block",
              "width": "2px",
              "height": "0.9em",
              "backgroundColor": "var(--color-accent)",
              "marginLeft": "2px",
              "animation": "blink 1.2s linear infinite"
            }
          }
        ]
      },
      "description": "An independent developer coding with love."
    },
    "module": {
      "liveDesk": {
        "enable": true
      },
      "activity": {
        "enable": false,
        "endpoint": "/fn/ps/update"
      },
      "donate": {
        "enable": false,
        "link": "",
        "qrcode": []
      },
      "bilibili": {
        "liveId": 0
      },
      "openpanel": {
        "enable": false,
        "id": "",
        "url": ""
      },
      "posts": {
        "mode": "loose"
      },
      "signature": {
        "svg": "",
        "animated": true
      }
    }
  }
}

footer:
  otherInfo:
    date: "2020-{{now}}"
    icp:
      text: "萌 ICP 备 20236136 号"
      link: "https://icp.gov.moe/?keyword=20236136"

  linkSections:
    - name: "关于"
      links:
        - name: "关于本站"
          href: "/about-site"
        - name: "关于我"
          href: "/about"
        - name: "关于此项目"
          href: "https://github.com/Innei/Yohaku"
          external: true

    - name: "更多"
      links:
        - name: "时间线"
          href: "/timeline"
        - name: "友链"
          href: "/friends"

    - name: "联系"
      links:
        - name: "写留言"
          href: "/message"
        - name: "GitHub"
          href: "https://github.com/innei"
          external: true

config:
  color:
    light:
      - "#33A6B8"
      - "#FF6666"
      - "#26A69A"
      - "#fb7287"
      - "#69a6cc"
    dark:
      - "#F596AA"
      - "#A0A7D4"
      - "#ff7b7b"
      - "#99D8CF"
      - "#838BC6"

  site:
    favicon: "/favicon.svg"
    faviconDark: "/favicon-dark.svg"

  hero:
    title:
      template:
        - type: "span"
          text: "Hi, I'm "
          style:
            fontWeight: 300
            opacity: 0.85

        - type: "span"
          text: "Innei"
          style:
            fontWeight: 500
            color: "var(--color-accent)"
            letterSpacing: "-0.02em"

        - type: "span"
          text: " 👋"
          style:
            fontWeight: 300
            display: "inline-block"
            transform: "rotate(-8deg)"

        - type: "br"

        - type: "span"
          text: "A NodeJS Full Stack "
          style:
            fontWeight: 300
            opacity: 0.8

        - type: "code"
          text: "<Developer />"
          style:
            display: "inline-block"
            fontFamily: "var(--font-mono)"
            fontSize: "0.72em"
            fontWeight: 500
            padding: "0.25em 0.55em"
            borderRadius: "0.35em"
            backgroundColor: "color-mix(in srgb, var(--color-accent) 10%, transparent)"
            color: "var(--color-accent)"
            border: "1px solid color-mix(in srgb, var(--color-accent) 22%, transparent)"

        - type: "span"
          style:
            display: "inline-block"
            width: "2px"
            height: "0.9em"
            backgroundColor: "var(--color-accent)"
            marginLeft: "2px"
            animation: "blink 1.2s linear infinite"

    description: "An independent developer coding with love."

  module:
    liveDesk:
      enable: true

    activity:
      enable: false
      endpoint: "/fn/ps/update"

    donate:
      enable: false
      link: ""
      qrcode: []

    bilibili:
      liveId: 0

    openpanel:
      enable: false
      id: ""
      url: ""

    posts:
      mode: "loose"

    signature:
      svg: ""
      animated: true