name: Deploy Prod

on:
  pull_request:
    branches:
      - prod
    types: [closed]

jobs:
  deploy-prod:
    name: Deploy prod
    runs-on: [prod]
    steps:
      - name: checkout
        uses: actions/checkout@v4
        with:
            ref: prod
      - name: deploy
        env:
          VPN_PASSWORD: ${{ secrets.VPN_PASSWORD }}
          VPN_IPSEC_PSK: ${{ secrets.VPN_IPSEC_PSK }}
        run: docker stack deploy --with-registry-auth -c ./.deploy/deploy-prod.yaml vpn