البيئات: Dev / Staging / Production

jobs:
  deploy:
    runs-on: ubuntu-latest
    environment:
      name: production
      url: https://myapp.com
    steps:
      - run: echo "نشر إلى الإنتاج"

environment:
  name: production
  # يتطلب موافقة يدوية للنشر
  # يمكن تفعيلها من إعدادات المستودع > Environments

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - run: echo "تشغيل الاختبارات"

  deploy-staging:
    needs: test
    runs-on: ubuntu-latest
    environment:
      name: staging
      url: https://staging.myapp.com
    steps:
      - run: echo "نشر إلى staging"

  deploy-production:
    needs: deploy-staging
    runs-on: ubuntu-latest
    environment:
      name: production
      url: https://myapp.com
    steps:
      - run: echo "نشر إلى الإنتاج"

jobs:
  deploy:
    steps:
      - name: تحديد المتغيرات حسب البيئة
        run: |
          if [[ "${{ github.ref }}" == "refs/heads/main" ]]; then
            echo "API_URL=https://api.prod.com" >> $GITHUB_ENV
          else
            echo "API_URL=https://api.staging.com" >> $GITHUB_ENV
          fi

# إعداد Secrets خاصة بكل بيئة
# Settings → Environments → production → Add secret
# Settings → Environments → staging → Add secret

jobs:
  deploy:
    environment: production
    steps:
      - run: echo "${{ secrets.API_KEY }}"

jobs:
  deploy:
    environment: staging
    steps:
      - run: echo "Base URL: ${{ vars.BASE_URL }}"