docker.yml

# Optional: publish the image to Docker Hub on every push to main.
# Skips cleanly when DOCKERHUB_USERNAME / DOCKERHUB_PASSWORD are not set.
name: Build and Publish Docker Image to DockerHub

on:
  push:
    branches: ["main"]

permissions:
  contents: read

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v5

      - name: Check DockerHub Credentials
        id: check_creds
        run: |
          if [ -n "${{ secrets.DOCKERHUB_USERNAME }}" ] && [ -n "${{ secrets.DOCKERHUB_PASSWORD }}" ]; then
            echo "has_creds=true" >> $GITHUB_OUTPUT
          else
            echo "has_creds=false" >> $GITHUB_OUTPUT
            echo "DockerHub credentials not provided; skipping image push."
          fi

      - name: DockerHub Login
        if: steps.check_creds.outputs.has_creds == 'true'
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_PASSWORD }}

      - name: Set up Docker Buildx
        if: steps.check_creds.outputs.has_creds == 'true'
        uses: docker/setup-buildx-action@v3

      - name: Build and Push Docker image
        if: steps.check_creds.outputs.has_creds == 'true'
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./Dockerfile
          push: true
          tags: |
            ${{ secrets.DOCKERHUB_USERNAME }}/${{ github.event.repository.name }}:latest
            ${{ secrets.DOCKERHUB_USERNAME }}/${{ github.event.repository.name }}:${{ github.sha }}