name: Deploy

on:
  push:
    branches: [main]

jobs:
  deploy:
    # Runs on a repo-scoped self-hosted runner living on the same box that
    # serves hcl.archipelago-foundation.org, specifically so deploy is a
    # plain local file copy — no SSH keys or remote credentials to manage.
    runs-on: hcl-deploy
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Build and validate every report
        run: python3 scripts/build.py

      - name: Deploy to the live docroot
        run: rsync -a --delete site/ /var/www/hcl.archipelago-foundation.org/