#!/usr/bin/env bash
# Deploy the marketing site to the host that actually serves it.
#
#   ./scripts/deploy.sh [--version=<tag>] [server]
#
# This used to be a CI job. It ran `docker run` on whichever runner picked the
# job up, which was correct while exactly one runner existed — there are now
# several, none of them on the host this site runs on, so the job would have
# started a second container in the wrong place and reported success. Naming the
# target is the whole point of this script.
set -euo pipefail

SERVER="${DEPLOY_SERVER:-10.7.224.11}"
REGISTRY="${REGISTRY:-git.netork.io/netork}"
VERSION="${VERSION:-latest}"
NAME="${CONTAINER_NAME:-netork-website}"

ENV_FILE="$(cd "$(dirname "$0")/.." && pwd)/deploy.env"
# shellcheck source=/dev/null
[[ -f "$ENV_FILE" ]] && source "$ENV_FILE"

for arg in "$@"; do
  case "$arg" in
    --version=*) VERSION="${arg#--version=}" ;;
    *) SERVER="$arg" ;;
  esac
done

IMAGE="${REGISTRY}/website:${VERSION}"
echo "[${SERVER}] Deploying ${IMAGE}"

if [[ -n "${REGISTRY_TOKEN:-}" ]]; then
  ssh -n "$SERVER" "echo '${REGISTRY_TOKEN}' | docker login git.netork.io -u '${REGISTRY_USER:-christianmanivong}' --password-stdin" \
    | sed "s/^/[${SERVER}] /"
fi

# Pull first, and let a failure stop the script here: the container is only
# removed once there is something to replace it with.
echo "[${SERVER}] Pulling..."
ssh -n "$SERVER" "docker pull '${IMAGE}'" | tail -2 | sed "s/^/[${SERVER}] /"

echo "[${SERVER}] Recreating..."
ssh -n "$SERVER" "docker rm -f '${NAME}' >/dev/null 2>&1 || true; \
  docker run -d --name '${NAME}' --restart unless-stopped --network proxy-net '${IMAGE}' >/dev/null && echo started" \
  | sed "s/^/[${SERVER}] /"

# `docker run` cannot silently reuse an old container the way `compose up -d`
# can, but the tag it resolved might still not be the one that was just pulled.
# Compare, rather than trust.
echo "[${SERVER}] Verifying..."
WANT=$(ssh -n "$SERVER" "docker image inspect --format '{{.Id}}' '${IMAGE}'")
GOT=$(ssh -n "$SERVER" "docker inspect --format '{{.Image}}' '${NAME}'")
if [[ "$WANT" != "$GOT" ]]; then
  echo "[${SERVER}] ERROR: container runs ${GOT}, expected ${WANT}" >&2
  exit 1
fi
echo "[${SERVER}] Verified: ${NAME} runs ${IMAGE}."

echo "[${SERVER}] Checking the site answers..."
CODE=$(curl -s -o /dev/null -w '%{http_code}' --max-time 20 https://netork.io/ || echo 000)
echo "[${SERVER}] https://netork.io -> ${CODE}"
[[ "$CODE" == "200" ]] || { echo "[${SERVER}] ERROR: site is not answering 200" >&2; exit 1; }