steps:
  sync-cloudflare:
    when:
      branch: [master]
    name: Scan Apps and Update Cloudflared
    image: alpine
    commands:
      - apk add --no-cache git bash curl yq
      - bash automation/cloudflared/cloudflared-sync.sh
    environment:
      GIT_TOKEN:
        from_secret: GIT_TOKEN
      CLOUDFLARE_API_TOKEN:
        from_secret: CLOUDFLARE_API_TOKEN
      CLOUDFLARE_ZONE_ID:
        from_secret: CLOUDFLARE_ZONE_ID

  sync-prometheus-scrapes:
    when:
      branch: [master]
    name: Update Prometheus Additional Scrapes
    image: python:3.11-alpine
    commands:
      - apk add --no-cache git bash
      - pip install ruamel.yaml
      - bash automation/prometheus/scrape-sync.sh
    environment:
      GIT_TOKEN:
        from_secret: GIT_TOKEN

  external-url-alerts:
    when:
      branch: [master]
    name: External Alert Checks (Pushover)
    image: python:3.11-alpine
    commands:
      - apk add --no-cache git curl bash
      - pip install pyyaml requests
      - python3 automation/alerts/generate_monitor_workflow.py
    environment:
      GITHUB_TOKEN:
        from_secret: GITHUB_TOKEN

  sync-uptime-kuma:
    when:
      branch: [master]
    name: Sync Uptime Kuma Monitors
    image: python:3.11-alpine
    commands:
      - apk add --no-cache git curl bash
      - pip install pyyaml requests
      - pip install uptime_kuma_api
      - python3 automation/uptime-kuma/sync_kuma.py
    environment:
      GIT_TOKEN:
        from_secret: GIT_TOKEN
      KUMA_URL:
        from_secret: KUMA_URL       # e.g. https://kuma.dvirlabs.com
      KUMA_USERNAME:
        from_secret: KUMA_USERNAME  # admin or your user
      KUMA_PASSWORD:
        from_secret: KUMA_PASSWORD