#!/usr/bin/env bash

set -euo pipefail

: ${DOCKER_REPO}
: ${DOMAIN}
: ${S3_BUCKET}

if [[ -z "${DEPLOY_SSH_PRIVATE_KEY:-}" ]]; then
    : ${DEPLOY_SSH_PUBLIC_KEY_FILE}
    DEPLOY_SSH_PRIVATE_KEY="$(base64 < "${DEPLOY_SSH_PUBLIC_KEY_FILE%.pub}")"
fi

tmpdir="$(mktemp -d)"

function cleanup {
    rm -rf "${tmpdir}"
}

trap cleanup EXIT

make pull-base all-scripts

node tools/plan-publish.js --execute --publish --show-all --omit-unneeded-downloads \
    | tee "${tmpdir}/plan-publish.out"

if ! grep -F "plan-publish is tagging app image" "${tmpdir}/plan-publish.out"; then
    echo "publish.bash: no changes to app image, so not deploying" >&2
    exit 0
fi

sha="$(git describe --match=always-omit-tag --always --abbrev=40 --dirty)"

image="${DOCKER_REPO}:app-${sha}"

docker tag "${DOCKER_REPO}:app" "${image}"
docker push "${image}"

exec tools/deploy.bash "${image}"