# .github/workflows/fly-deploy.yml
name: Deploy to Fly.io
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
        with: { node-version: '20' }
      - run: npm ci && npm test

  deploy-staging:
    needs: test
    if: github.event_name == 'pull_request'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: superfly/flyctl-actions/setup-flyctl@master
      - run: fly deploy -a my-app-staging --config fly.staging.toml
        env:
          FLY_API_TOKEN: ${{ secrets.FLY_DEPLOY_TOKEN_STAGING }}

  deploy-production:
    needs: test
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: superfly/flyctl-actions/setup-flyctl@master
      - run: fly deploy -a my-app
        env:
          FLY_API_TOKEN: ${{ secrets.FLY_DEPLOY_TOKEN }}
      - run: |
          fly status -a my-app
          curl -sf https://my-app.fly.dev/health

# Scoped to a single app — use this in CI
fly tokens create deploy -a my-app
# Add as GitHub secret: FLY_DEPLOY_TOKEN