---
kind: secret
name: username_xigmanas
get:
  path: secret/data/xigmanas/ssh
  name: username
---
kind: secret
name: password_xigmanas
get:
  path: secret/data/xigmasnas/ssh
  name: password

---
kind: secret
name: password_matrix
get:
  path: secret/data/matrix/bot/drone-bot
  name: password
---
kind: secret
name: userid_matrix
get:
  path: secret/data/matrix/bot/drone-bot
  name: userid
---
kind: secret
name: roomid_matrix
get:
  path: secret/data/matrix/bot/drone-bot
  name: roomid

---
kind: pipeline
type: ssh
name: authelia_check

server:
  host: xigmanas.lan
  user:
    from_secret: username_xigmanas
  password:
    from_secret: password_xigmanas


steps:
  - name: check_authelia_update
    commands:
      - timeout 5m bastille cmd authelia sh -s < authelia/authelia-update.sh

trigger:
  event:
    - pull_request
    - cron
    - manual


---
kind: pipeline
type: ssh
name: authelia_apply

server:
  host: xigmanas.lan
  user:
    from_secret: username_xigmanas
  password:
    from_secret: password_xigmanas


steps:
  - name: apply_authelia_update
    commands:
      - timeout 10m bastille cmd authelia sh -s -- --apply --auto-revert < authelia/authelia-update.sh

trigger:
  event:
    - manual


---
kind: pipeline
name: matrix_message

depends_on:
  - authelia_check
  - authelia_apply

trigger:
  event:
    - pull_request
    - cron
    - manual
  status:
    - success
    - failure

steps:
  - name: notify
    image: spotlightkid/drone-matrixchat-notify
    settings:
      homeserver: 'https://matrix.familie-berner.de'
      roomid:
        from_secret: roomid_matrix
      userid:
        from_secret: userid_matrix
      password:
        from_secret: password_matrix
      markdown: 'yes'
      template: |
        **Authelia Update**
        repo: `${DRONE_REPO}`
        branch: `${DRONE_BRANCH}`
        build: `#${DRONE_BUILD_NUMBER}`
        status: **${DRONE_BUILD_STATUS}**

        event: `${DRONE_BUILD_EVENT}`
        commit: ${DRONE_COMMIT_LINK}

        pr: `${DRONE_PULL_REQUEST}`
        ${DRONE_PULL_REQUEST_TITLE}

    when:
      branch:
        - master
        - main