.goreleaser.yml

version: 2

project_name: nebula-mesh

before:
  hooks:
    - go mod tidy

builds:
  - id: nebula-mgmt
    binary: nebula-mgmt
    main: ./cmd/nebula-mgmt
    env: [CGO_ENABLED=0]
    goos: [linux, darwin]
    goarch: [amd64, arm64]
    flags: [-trimpath]
    ldflags:
      - -s -w
      - -X main.versionStr={{.Version}}
      - -X main.commit={{.Commit}}
      - -X main.date={{.Date}}

  - id: nebula-agent
    binary: nebula-agent
    main: ./cmd/nebula-agent
    env: [CGO_ENABLED=0]
    goos: [linux, darwin, freebsd, windows]
    goarch: [amd64, arm64, arm]
    goarm: ["7"]
    ignore:
      # No 32-bit arm darwin/freebsd/windows targets.
      - goos: darwin
        goarch: arm
      - goos: freebsd
        goarch: arm
      - goos: windows
        goarch: arm
      # windows/arm64 — buildable but rarely useful for Nebula. Drop until
      # demand emerges to keep the release matrix manageable.
      - goos: windows
        goarch: arm64
    flags: [-trimpath]
    ldflags:
      - -s -w
      - -X main.versionStr={{.Version}}
      - -X main.commit={{.Commit}}
      - -X main.date={{.Date}}

archives:
  - id: server
    ids: [nebula-mgmt]
    name_template: "nebula-mgmt_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
    formats: [tar.gz]
    files:
      - LICENSE
      - README.md
      - CHANGELOG.md
      - configs/server.example.yml
      - deploy/systemd/nebula-mgmt.service
      - deploy/systemd/README.md

  - id: agent
    ids: [nebula-agent]
    name_template: >-
      nebula-agent_{{ .Version }}_{{ .Os }}_{{ .Arch }}{{ with .Arm }}v{{ . }}{{ end }}
    format_overrides:
      - goos: windows
        formats: [zip]
    formats: [tar.gz]
    files:
      - LICENSE
      - README.md
      - CHANGELOG.md
      - configs/agent.example.yml
      - docs/agent.md
      - deploy/systemd/nebula-agent.service
      - deploy/systemd/README.md

nfpms:
  - id: nebula-mgmt
    package_name: nebula-mgmt
    ids: [nebula-mgmt]
    vendor: "forgekeep"
    homepage: "https://github.com/forgekeep/nebula-mesh"
    maintainer: "forgekeep <https://github.com/forgekeep>"
    description: |
      Self-hosted control plane for Slack Nebula. Issues certificates,
      manages hosts, distributes config to nebula-agent instances, and
      exposes a Web UI + REST API + CLI for operators.
    license: MIT
    formats: [deb, rpm]
    bindir: /usr/bin
    section: net
    contents:
      - src: configs/server.example.yml
        dst: /etc/nebula-mgmt/server.example.yml
        type: config|noreplace
      - src: deploy/systemd/nebula-mgmt.service
        dst: /lib/systemd/system/nebula-mgmt.service
      - src: README.md
        dst: /usr/share/doc/nebula-mgmt/README.md
      - src: LICENSE
        dst: /usr/share/doc/nebula-mgmt/LICENSE
      - src: CHANGELOG.md
        dst: /usr/share/doc/nebula-mgmt/CHANGELOG.md
      - src: docs/server.md
        dst: /usr/share/doc/nebula-mgmt/server.md
      - src: deploy/reverse-proxy/nginx/nebula-mgmt.conf
        dst: /usr/share/doc/nebula-mgmt/reverse-proxy/nginx.conf
      - src: deploy/reverse-proxy/caddy/Caddyfile
        dst: /usr/share/doc/nebula-mgmt/reverse-proxy/Caddyfile
      - src: deploy/reverse-proxy/traefik/dynamic.yml
        dst: /usr/share/doc/nebula-mgmt/reverse-proxy/traefik-dynamic.yml
    overrides:
      rpm:
        dependencies:
          - shadow-utils
      deb:
        dependencies:
          - adduser
    scripts:
      postinstall: deploy/packaging/postinstall-mgmt.sh
      preremove:   deploy/packaging/preremove-mgmt.sh
      postremove:  deploy/packaging/postremove-mgmt.sh
    rpm:
      group: System Environment/Daemons
      summary: Self-hosted control plane for Slack Nebula
    deb:
      fields:
        Bugs: "https://github.com/forgekeep/nebula-mesh/issues"
      lintian_overrides:
        - "statically-linked-binary"

  - id: nebula-agent
    package_name: nebula-agent
    ids: [nebula-agent]
    vendor: "forgekeep"
    homepage: "https://github.com/forgekeep/nebula-mesh"
    maintainer: "forgekeep <https://github.com/forgekeep>"
    description: |
      Polling agent for the nebula-mesh management server.
      Enrolls a host, keeps host.crt/host.key/ca.crt/config.yml in sync,
      and signals Slack Nebula on changes.
    license: MIT
    formats: [deb, rpm]
    bindir: /usr/bin
    section: net
    contents:
      - src: configs/agent.example.yml
        dst: /etc/nebula-agent/agent.example.yml
        type: config|noreplace
      - src: deploy/systemd/nebula-agent.service
        dst: /lib/systemd/system/nebula-agent.service
      - src: docs/agent.md
        dst: /usr/share/doc/nebula-agent/agent.md
      - src: LICENSE
        dst: /usr/share/doc/nebula-agent/LICENSE
    overrides:
      rpm:
        dependencies:
          - shadow-utils
      deb:
        dependencies:
          - adduser
    scripts:
      postinstall: deploy/packaging/postinstall.sh
      preremove:   deploy/packaging/preremove.sh
      postremove:  deploy/packaging/postremove.sh
    rpm:
      group: System Environment/Daemons
      summary: Polling agent for nebula-mesh
    deb:
      fields:
        Bugs: "https://github.com/forgekeep/nebula-mesh/issues"
      lintian_overrides:
        - "statically-linked-binary"

dockers:
  - id: server-amd64
    goos: linux
    goarch: amd64
    ids: [nebula-mgmt]
    dockerfile: deploy/docker/Dockerfile.server
    image_templates:
      - "ghcr.io/forgekeep/nebula-mgmt:{{ .Version }}-amd64"
    use: buildx
    build_flag_templates:
      - "--platform=linux/amd64"
      - "--label=org.opencontainers.image.title=nebula-mgmt"
      - "--label=org.opencontainers.image.description=Self-hosted control plane for Slack Nebula"
      - "--label=org.opencontainers.image.source=https://github.com/forgekeep/nebula-mesh"
      - "--label=org.opencontainers.image.licenses=MIT"
      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
      - "--label=org.opencontainers.image.version={{.Version}}"
      - "--label=org.opencontainers.image.created={{.Date}}"

  - id: server-arm64
    goos: linux
    goarch: arm64
    ids: [nebula-mgmt]
    dockerfile: deploy/docker/Dockerfile.server
    image_templates:
      - "ghcr.io/forgekeep/nebula-mgmt:{{ .Version }}-arm64"
    use: buildx
    build_flag_templates:
      - "--platform=linux/arm64"
      - "--label=org.opencontainers.image.title=nebula-mgmt"
      - "--label=org.opencontainers.image.description=Self-hosted control plane for Slack Nebula"
      - "--label=org.opencontainers.image.source=https://github.com/forgekeep/nebula-mesh"
      - "--label=org.opencontainers.image.licenses=MIT"
      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
      - "--label=org.opencontainers.image.version={{.Version}}"
      - "--label=org.opencontainers.image.created={{.Date}}"

  - id: agent-amd64
    goos: linux
    goarch: amd64
    ids: [nebula-agent]
    dockerfile: deploy/docker/Dockerfile.agent
    image_templates:
      - "ghcr.io/forgekeep/nebula-agent:{{ .Version }}-amd64"
    use: buildx
    build_flag_templates:
      - "--platform=linux/amd64"
      - "--label=org.opencontainers.image.title=nebula-agent"
      - "--label=org.opencontainers.image.description=Polling agent for nebula-mesh"
      - "--label=org.opencontainers.image.source=https://github.com/forgekeep/nebula-mesh"
      - "--label=org.opencontainers.image.licenses=MIT"
      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
      - "--label=org.opencontainers.image.version={{.Version}}"
      - "--label=org.opencontainers.image.created={{.Date}}"

  - id: agent-arm64
    goos: linux
    goarch: arm64
    ids: [nebula-agent]
    dockerfile: deploy/docker/Dockerfile.agent
    image_templates:
      - "ghcr.io/forgekeep/nebula-agent:{{ .Version }}-arm64"
    use: buildx
    build_flag_templates:
      - "--platform=linux/arm64"
      - "--label=org.opencontainers.image.title=nebula-agent"
      - "--label=org.opencontainers.image.description=Polling agent for nebula-mesh"
      - "--label=org.opencontainers.image.source=https://github.com/forgekeep/nebula-mesh"
      - "--label=org.opencontainers.image.licenses=MIT"
      - "--label=org.opencontainers.image.revision={{.FullCommit}}"
      - "--label=org.opencontainers.image.version={{.Version}}"
      - "--label=org.opencontainers.image.created={{.Date}}"

docker_manifests:
  - name_template: "ghcr.io/forgekeep/nebula-mgmt:{{ .Version }}"
    image_templates:
      - "ghcr.io/forgekeep/nebula-mgmt:{{ .Version }}-amd64"
      - "ghcr.io/forgekeep/nebula-mgmt:{{ .Version }}-arm64"
  - name_template: "ghcr.io/forgekeep/nebula-mgmt:latest"
    image_templates:
      - "ghcr.io/forgekeep/nebula-mgmt:{{ .Version }}-amd64"
      - "ghcr.io/forgekeep/nebula-mgmt:{{ .Version }}-arm64"
  - name_template: "ghcr.io/forgekeep/nebula-agent:{{ .Version }}"
    image_templates:
      - "ghcr.io/forgekeep/nebula-agent:{{ .Version }}-amd64"
      - "ghcr.io/forgekeep/nebula-agent:{{ .Version }}-arm64"
  - name_template: "ghcr.io/forgekeep/nebula-agent:latest"
    image_templates:
      - "ghcr.io/forgekeep/nebula-agent:{{ .Version }}-amd64"
      - "ghcr.io/forgekeep/nebula-agent:{{ .Version }}-arm64"

checksum:
  name_template: "checksums.txt"
  algorithm: sha256

snapshot:
  version_template: "{{ incpatch .Version }}-next"

changelog:
  sort: asc
  use: github
  # No catch-all group: a commit matching none of the groups below is
  # dropped from the changelog, not funneled into an "Others" bucket.
  # This replaces exclude-by-prefix (which previously drifted out of sync
  # for scoped commits, e.g. chore(deps): leaking past a bare ^chore: filter
  # in v0.7.1/v0.7.2) with an explicit whitelist of what's worth showing.
  groups:
    - title: Features
      regexp: '^.*?feat(\(.+\))?!?:.+$'
      order: 0
    - title: "Bug fixes"
      regexp: '^.*?fix(\(.+\))?!?:.+$'
      order: 1
    - title: "Performance"
      regexp: '^.*?perf(\(.+\))?!?:.+$'
      order: 2
    - title: "Dependency updates"
      regexp: '^.*?chore\(deps\):.+$'
      order: 3

release:
  github:
    owner: forgekeep
    name: nebula-mesh
  draft: false
  prerelease: auto
  name_template: "v{{ .Version }}"
  header: |
    ## nebula-mesh {{ .Tag }}

    **Install:** see [README](https://github.com/forgekeep/nebula-mesh#install) for install snippets (all packages/archives are in the assets below).
  footer: |
    ---

    **Full changelog**: https://github.com/forgekeep/nebula-mesh/compare/{{ .PreviousTag }}...{{ .Tag }}