deploy-android.yml

name: Deploy Android

on:
  workflow_dispatch:
  push:
    branches:
      - internal
      - alpha
      - beta
      - master

concurrency:
  group: deploy-android-${{ github.ref }}
  cancel-in-progress: false

jobs:
  build-android:
    name: Deploy Android
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Install dependencies
        uses: ./.github/actions/install-dependencies

      - run: sudo apt-get install -y gnupg1

      - name: Encrypt GPG secure files
        run: |
          # echo ${{ secrets.SUPER_SECRET_PASSWORD }} | gpg1 --no-tty --passphrase-fd 0 android/my-release-key.keystore.gpg
          echo ${{ secrets.SUPER_SECRET_PASSWORD }} | gpg1 --no-tty --passphrase-fd 0 android/app/google-services.json.gpg
          echo ${{ secrets.SUPER_SECRET_PASSWORD }} | gpg1 --no-tty --passphrase-fd 0 android/democracy2-release-key.keystore.gpg
          echo ${{ secrets.SUPER_SECRET_PASSWORD }} | gpg1 --no-tty --passphrase-fd 0 android/key.json.gpg

      - name: Extract branch name
        shell: bash
        run: |
          if [[ ${{ github.ref }} == 'refs/heads/master' ]]; then
            echo "lane=production" >> $GITHUB_OUTPUT
          else
            echo "lane=internal" >> $GITHUB_OUTPUT
          fi
        id: extract_branch

      - name: Fastlane
        uses: maierj/fastlane-action@v3.0.0
        with:
          lane: 'internal --env ${{ steps.extract_branch.outputs.lane }}'
          subdirectory: 'android'
        env:
          MATCH_GIT_BASIC_AUTHORIZATION: ${{ secrets.MATCH_GIT_BASIC_AUTHORIZATION }}
          FASTLANE_PASSWORD: ${{ secrets.FASTLANE_PASSWORD }}
          ANDROID_PASS: ${{ secrets.ANDROID_PASS }}
          CI: true