infra-maintenance/.drone.yml

---
kind: secret
name: password_authelia
get:
  path: secret/data/authelia/ssh
  name: root

---
kind: secret
name: password_matrix
get:
  path: secret/data/matrix/bot/drone-bot
  name: password
---
kind: secret
name: userid_matrix
get:
  path: secret/data/matrix/bot/drone-bot
  name: userid
---
kind: secret
name: roomid_matrix
get:
  path: secret/data/matrix/bot/drone-bot
  name: roomid


---
kind: pipeline
name: authelia_check

trigger:
  event:
    - pull_request
    - push

steps:
- name: ssh-check
  image: appleboy/drone-ssh
  settings:
    host: 10.0.4.18
    username: root
    password:
      from_secret: password_authelia
    port: 22
    command_timeout: 10m
    envs:
      - DRONE_BUILD_PARAMS
      - DRONE_BUILD_EVENT
    script: |
      set -eu

      # Drone übergibt Build-Parameter als JSON-String in DRONE_BUILD_PARAMS
      # Beispiel: {"args": "mein-wert"}
      
      ARGS=""
      if [ -n "${DRONE_BUILD_PARAMS:-}" ]; then
        # Extrahiere den Wert für den Key "args"
        ARGS=$(echo "$DRONE_BUILD_PARAMS" | sed -n 's/.*"args"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p')
      fi

      fetch -o /tmp/authelia-update.sh \
        https://git.familie-berner.de/Open/infra-maintenance/raw/branch/main/authelia/authelia-update.sh

      chmod +x /tmp/authelia-update.sh

      echo "[INFO] Build event: ${DRONE_BUILD_EVENT}"
      echo "[INFO] Raw Params: ${DRONE_BUILD_PARAMS:-none}"
      echo "[INFO] Extracted Args: ${ARGS:-<none>}"

      timeout 10m /tmp/authelia-update.sh $ARGS

---
kind: pipeline
name: authelia_apply

trigger:
  event:
    - cron
    - custom

steps:
- name: ssh-check
  image: appleboy/drone-ssh
  settings:
    host: 10.0.4.18
    username: root
    password:
      from_secret: password_authelia
    port: 22
    command_timeout: 10m
    envs:
      - DRONE_BUILD_PARAMS
      - DRONE_BUILD_EVENT
    script: |
      set -eu

      # Drone übergibt Build-Parameter als JSON-String in DRONE_BUILD_PARAMS
      # Beispiel: {"args": "mein-wert"}
      
      ARGS=""
      if [ -n "${DRONE_BUILD_PARAMS:-}" ]; then
        # Extrahiere den Wert für den Key "args"
        ARGS=$(echo "$DRONE_BUILD_PARAMS" | sed -n 's/.*"args"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p')
      fi

      fetch -o /tmp/authelia-update.sh \
        https://git.familie-berner.de/Open/infra-maintenance/raw/branch/main/authelia/authelia-update.sh

      chmod +x /tmp/authelia-update.sh

      echo "[INFO] Build event: ${DRONE_BUILD_EVENT}"
      echo "[INFO] Raw Params: ${DRONE_BUILD_PARAMS:-none}"
      echo "[INFO] Extracted Args: ${ARGS:-<none>}"

      timeout 10m /tmp/authelia-update.sh $ARGS

---
kind: pipeline
name: matrix_message

depends_on:
  - authelia_check

trigger:
  status:
    - failure

steps:
  - name: notify
    image: spotlightkid/drone-matrixchat-notify
    settings:
      homeserver: 'https://matrix.familie-berner.de'
      roomid:
        from_secret: roomid_matrix
      userid:
        from_secret: userid_matrix
      password:
        from_secret: password_matrix
      markdown: 'yes'
      template: |
        **Authelia Update**
        repo: `${DRONE_REPO}`
        branch: `${DRONE_BRANCH}`
        build: `#${DRONE_BUILD_NUMBER}`
        status: **${DRONE_BUILD_STATUS}**

        event: `${DRONE_BUILD_EVENT}`
        commit: ${DRONE_COMMIT_LINK}

        pr: `${DRONE_PULL_REQUEST}`
        ${DRONE_PULL_REQUEST_TITLE}

    when:
      branch:
        - master
        - main