dograh/.github/workflows/docker-image.yml

name: Build and Push Docker Images

on:
  push:
    branches:
      - main

# Ensure only one workflow run per branch at a time; cancel any in-progress runs on new push
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  build:
    runs-on: ubuntu-latest
    env:
      COMMIT_SHA: ${{ github.sha }}  # Used to tag images with short commit SHA

    strategy:
      matrix:
        service: 
          - "dograh-api|api/Dockerfile|./api"
          - "dograh-ui|ui/Dockerfile|./ui"

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
          submodules: true  # Only for version check, not used in build

      - name: Get pipecat commit SHA
        id: pipecat-version
        run: |
          # Extract the pipecat commit SHA from submodule
          chmod +x scripts/get_pipecat_commit.sh
          PIPECAT_COMMIT=$(./scripts/get_pipecat_commit.sh)
          echo "pipecat_commit=${PIPECAT_COMMIT}" >> $GITHUB_OUTPUT
          echo "📦 Pipecat commit SHA: ${PIPECAT_COMMIT}"

      - name: Set up QEMU  # Enables cross-platform builds (e.g., arm64)
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx  # Enables multi-arch and advanced Docker builds
        uses: docker/setup-buildx-action@v3

      - name: Log in to DockerHub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Log in to GHCR
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ secrets.GHCR_USERNAME }}
          password: ${{ secrets.GHCR_TOKEN }}

      - name: Build and Push ${{ matrix.service }}
        id: docker-build
        run: |
          # Parse matrix entry into individual variables
          SERVICE="${{ matrix.service }}"
          IMAGE_NAME=$(echo "$SERVICE" | cut -d '|' -f1)
          DOCKERFILE=$(echo "$SERVICE" | cut -d '|' -f2)
          CONTEXT=$(echo "$SERVICE" | cut -d '|' -f3)
          SHORT_SHA=${COMMIT_SHA::8}

          echo "Building and pushing image: $IMAGE_NAME"
          echo "Dockerfile: $DOCKERFILE"
          echo "Context: $CONTEXT"
          echo "Commit SHA: $SHORT_SHA"
          
          # Export tags for Slack notification
          echo "image_name=${IMAGE_NAME}" >> $GITHUB_OUTPUT
          echo "dockerhub_tag=${{ secrets.DOCKERHUB_USERNAME }}/${IMAGE_NAME}:${SHORT_SHA}" >> $GITHUB_OUTPUT
          echo "ghcr_tag=ghcr.io/${{ secrets.GHCR_USERNAME }}/${IMAGE_NAME}:${SHORT_SHA}" >> $GITHUB_OUTPUT
          echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT

          # Build and push multi-arch Docker image to DockerHub and GHCR
          docker buildx build \
            -f "$DOCKERFILE" \
            --build-arg PIPECAT_COMMIT=${{ steps.pipecat-version.outputs.pipecat_commit }} \
            --platform linux/amd64,linux/arm64 \
            --tag ${{ secrets.DOCKERHUB_USERNAME }}/$IMAGE_NAME:$SHORT_SHA \
            --tag ${{ secrets.DOCKERHUB_USERNAME }}/$IMAGE_NAME:latest \
            --tag ghcr.io/${{ secrets.GHCR_USERNAME }}/$IMAGE_NAME:$SHORT_SHA \
            --tag ghcr.io/${{ secrets.GHCR_USERNAME }}/$IMAGE_NAME:latest \
            --push "$CONTEXT"
      
      # Success notification
      - name: Send Slack notification - Success
        if: success()
        uses: slackapi/slack-github-action@v1.26.0
        env:
          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
        with:
          payload: |
            {
              "text": "✅ Docker Build Successful",
              "blocks": [
                {
                  "type": "header",
                  "text": {
                    "type": "plain_text",
                    "text": "✅ Docker Build & Push Successful"
                  }
                },
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": "*Service:* `${{ steps.docker-build.outputs.image_name }}`\n*Commit:* `${{ steps.docker-build.outputs.short_sha }}`\n*Branch:* `${{ github.ref_name }}`\n*Author:* ${{ github.actor }}"
                  }
                },
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": "*📦 Published Tags:*\n• DockerHub: `${{ steps.docker-build.outputs.dockerhub_tag }}`\n• DockerHub: `${{ secrets.DOCKERHUB_USERNAME }}/${{ steps.docker-build.outputs.image_name }}:latest`\n• GHCR: `${{ steps.docker-build.outputs.ghcr_tag }}`\n• GHCR: `ghcr.io/${{ secrets.GHCR_USERNAME }}/${{ steps.docker-build.outputs.image_name }}:latest`"
                  }
                },
                {
                  "type": "context",
                  "elements": [
                    {
                      "type": "mrkdwn",
                      "text": "✅ Pipecat commit: `${{ steps.pipecat-version.outputs.pipecat_commit }}`"
                    }
                  ]
                }
              ]
            }
      
      # Failure notification
      - name: Send Slack notification - Failure
        if: failure()
        uses: slackapi/slack-github-action@v1.26.0
        env:
          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
        with:
          payload: |
            {
              "text": "❌ Docker Build Failed",
              "blocks": [
                {
                  "type": "header",
                  "text": {
                    "type": "plain_text",
                    "text": "❌ Docker Build Failed"
                  }
                },
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": "*Service:* `${{ steps.docker-build.outputs.image_name || matrix.service }}`\n*Branch:* `${{ github.ref_name }}`\n*Author:* ${{ github.actor }}\n*Workflow:* <${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|View Details>"
                  }
                },
                {
                  "type": "section",
                  "text": {
                    "type": "mrkdwn",
                    "text": "*Failure Reason:* Check workflow logs for details\n*Pipecat commit:* `${{ steps.pipecat-version.outputs.pipecat_commit }}`"
                  }
                }
              ]
            }