name: prepare-sol-public-edge

on:
  push:
    branches:
      - main
    paths:
      - sol/public-edge/**
      - .gitea/workflows/prepare-sol-public-edge.yaml
  workflow_dispatch:

jobs:
  prepare:
    runs-on: k3s-deploy
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Install OpenSSH client
        run: |
          if ! command -v ssh >/dev/null 2>&1; then
            apt-get update
            apt-get install -y --no-install-recommends openssh-client
          fi

      - name: Materialize sol SSH key
        env:
          SOL_SSH_PRIVATE_KEY_B64: ${{ secrets.SOL_SSH_PRIVATE_KEY_B64 }}
        run: |
          test -n "$SOL_SSH_PRIVATE_KEY_B64"
          install -d -m 0700 "$HOME/.ssh"
          printf '%s' "$SOL_SSH_PRIVATE_KEY_B64" | base64 -d >"$HOME/.ssh/sol_mevnode"
          chmod 600 "$HOME/.ssh/sol_mevnode"

      - name: Prepare public edge firewall rules
        env:
          TARGET_HOST: 149.50.96.162
          TARGET_USER: user
          PUBLIC_IFACE: enp6s0
        run: |
          chmod +x ./sol/public-edge/scripts/prepare-sol-public-edge.sh
          export SSH_IDENTITY_FILE="$HOME/.ssh/sol_mevnode"
          ./sol/public-edge/scripts/prepare-sol-public-edge.sh