when:
  - event: push
    branch: main

depends_on:
  - test
  - playwright

steps:
  - name: terraform
    image: hashicorp/terraform:latest
    environment:
       AWS_ACCESS_KEY_ID:
         from_secret: aws_access_key_id
       AWS_SECRET_ACCESS_KEY:
         from_secret: aws_secret_access_key
       SCW_SECRET_KEY:
         from_secret: sce_secret_key
       SCW_ACCESS_KEY:
         from_secret: scw_access_key
       USERSTORE_SQLITE_PATH:
         from_secret: userstore_sqlite_path
       SMTP_PASSWORD:
         from_secret: smtp_password
       SMTP_USERNAME:
         from_secret: smtp_username
    commands:
      - cd resources/infra
      - terraform init
      - sed -i 's@git.keks.cloud/kekskurse/miniauth:latest@git.keks.cloud/kekskurse/miniauth:${CI_COMMIT_SHA}@g' scw-container.tf
      - sed -i s@USERSTORE_SQLITE_PATH_SED@$USERSTORE_SQLITE_PATH@g scw-container.tf
      - sed -i s@SMTP_USERNAME_SED@$SMTP_USERNAME@g scw-container.tf
      - sed -i s@SMTP_PASSWORD_SED@$SMTP_PASSWORD@g scw-container.tf
      - terraform apply -auto-approve