ci.yml

name: CI

on:
  push:
  pull_request:
  workflow_dispatch:

permissions:
  contents: read

jobs:
  test:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version: ["3.10", "3.12", "3.14"]

    steps:
      - name: Check out repository
        uses: actions/checkout@v7
      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v7
        with:
          python-version: ${{ matrix.python-version }}
          cache: pip
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip
          python -m pip install -r requirements-dev.txt
      - name: Check dependency consistency
        run: python -m pip check
      - name: Run tests
        run: python -m pytest
      - name: Build distributions
        if: matrix.python-version == '3.14'
        run: python -m build --outdir "$RUNNER_TEMP/dist"

  docker:
    runs-on: ubuntu-latest
    env:
      SOCIAL_DATABASE_API_TOKEN: ci-api-token-0123456789
      SOCIAL_DATABASE_PREVIOUS_API_TOKEN: ci-previous-token-0123456789
      SOCIAL_DATABASE_DOMAIN: database.example.test
      SOCIAL_DATABASE_ALLOWED_CIDRS: 203.0.113.10/32
    steps:
      - name: Check out repository
        uses: actions/checkout@v7
      - name: Validate Compose configurations
        run: |
          docker compose -f compose.yaml config --quiet
          docker compose -f deploy/compose.production.yaml config --quiet
      - name: Validate Caddy configuration
        run: |
          docker run --rm \
            --volume "$PWD/deploy/Caddyfile:/etc/caddy/Caddyfile:ro" \
            caddy:2.11.4-alpine \
            caddy fmt --diff /etc/caddy/Caddyfile >/dev/null
          docker run --rm \
            --env SOCIAL_DATABASE_DOMAIN=http://localhost \
            --env SOCIAL_DATABASE_ALLOWED_CIDRS=127.0.0.1/32 \
            --volume "$PWD/deploy/Caddyfile:/etc/caddy/Caddyfile:ro" \
            caddy:2.11.4-alpine \
            caddy validate --config /etc/caddy/Caddyfile --adapter caddyfile
      - name: Build container image
        run: docker build --tag social-database:ci .
      - name: Verify container command
        run: docker run --rm social-database:ci social-database help