name: build-and-deploy
on:
  push:
    branches: [main]

jobs:
  build:
    runs-on: ubuntu-latest
    container: catthehacker/ubuntu:act-latest
    steps:
      - name: Checkout (internal — bypasses Cloudflare)
        run: |
          git clone --depth 1 --branch "${{ github.ref_name }}" \
            --config http.extraheader="Authorization: token ${{ github.token }}" \
            "http://gitea:3000/${{ github.repository }}.git" .

      - name: Install MkDocs Material
        run: pip install --break-system-packages --ignore-installed -r requirements.txt

      - name: Build and deploy
        run: mkdocs build --strict --clean -d /srv/www/docs-public