name: Reusable OpenTofu Deploy Template
on:
  workflow_call:
    inputs:
      vm_id:
        description: "The Proxmox VM ID"
        required: true
        type: string 
      ip_address:
        description: "The static IP address (e.g., 192.168.1.50/24)"
        required: true
        type: string
        
    secrets:
      PROXMOX_VE_ENDPOINT:
        required: true
      PROXMOX_VE_API_TOKEN:
        required: true
      TF_HTTP_USERNAME:
        required: true
      TF_HTTP_PASSWORD:
        required: true
      TF_HTTP_ADDRESS:
        required: true
      SSH_PUBLIC_KEY:
        required: true

jobs:
  deploy-to-proxmox:
    runs-on: ubuntu-latest
    env:
      PROXMOX_VE_ENDPOINT: ${{ secrets.PROXMOX_VE_ENDPOINT }}
      PROXMOX_VE_API_TOKEN: ${{ secrets.PROXMOX_VE_API_TOKEN }}
      PROXMOX_VE_INSECURE: "true" 
      
      TF_HTTP_ADDRESS: ${{ secrets.TF_HTTP_ADDRESS }}
      TF_HTTP_LOCK_ADDRESS: "${{ secrets.TF_HTTP_ADDRESS }}/lock"
      TF_HTTP_UNLOCK_ADDRESS: "${{ secrets.TF_HTTP_ADDRESS }}/lock"
      TF_HTTP_LOCK_METHOD: "POST"
      TF_HTTP_UNLOCK_METHOD: "DELETE"
      TF_HTTP_USERNAME: ${{ secrets.TF_HTTP_USERNAME }}
      TF_HTTP_PASSWORD: ${{ secrets.TF_HTTP_PASSWORD }}

      TF_VAR_vm_id: ${{ inputs.vm_id }}
      TF_VAR_ip_address: ${{ inputs.ip_address }}
      TF_VAR_ssh_public_key: ${{ secrets.SSH_PUBLIC_KEY }}

    steps:
      - name: Checkout Code
        uses: actions/checkout@v4
        
      - name: Setup OpenTofu
        uses: opentofu/setup-opentofu@v1
        
      - name: OpenTofu Init
        run: tofu init
        
      - name: OpenTofu Plan
        run: tofu plan -out=tfplan
        
      - name: OpenTofu Apply
        run: tofu apply -auto-approve tfplan