name: MobilityOps live probe

on:
  schedule:
    - cron: "7 * * * *"
  workflow_dispatch:

concurrency:
  group: mobilityops-live-probe
  cancel-in-progress: true

permissions:
  contents: read

jobs:
  public-probe:
    runs-on: linux-validation
    timeout-minutes: 3
    steps:
      - name: Verify HTTPS readiness and certificate horizon
        run: |
          curl --fail --silent --show-error --retry 3 https://fleetops.itworx.tech/health/ready
          openssl s_client -servername fleetops.itworx.tech -connect fleetops.itworx.tech:443 </dev/null 2>/dev/null \
            | openssl x509 -checkend 1209600 -noout
      - name: Report successful external heartbeat
        env:
          HEARTBEAT_URL: ${{ secrets.LIVE_CANARY_HEARTBEAT_URL }}
        run: |
          if [ -n "$HEARTBEAT_URL" ]; then
            curl --fail --silent --show-error --retry 3 "$HEARTBEAT_URL"
          fi