spring-security/.github/actions/publish-docs.sh

#!/bin/bash

FROM=build/site
HOST="$1"
HOST_PATH="$2"
SSH_PRIVATE_KEY="$3"
SSH_KNOWN_HOST="$4"
CLOUDFLARE_ZONE_ID="$5"
CLOUDFLARE_CACHE_TOKEN="$6"
SSH_PRIVATE_KEY_PATH="$HOME/.ssh/${GITHUB_REPOSITORY:-publish-docs}"

if [ "$#" -ne 6 ]; then
  echo -e "not enough arguments USAGE:\n\n$0 \$HOST \$HOST_PATH \$SSH_PRIVATE_KEY \$SSH_KNOWN_HOST \$CLOUDFLARE_ZONE_ID \$CLOUDFLARE_CACHE_TOKEN\n\n" >&2
  exit 1
fi

(
  set -e
  set -f
  install -m 600 -D /dev/null "$SSH_PRIVATE_KEY_PATH"
  echo "$SSH_PRIVATE_KEY" > "$SSH_PRIVATE_KEY_PATH"
  echo "$SSH_KNOWN_HOST" > ~/.ssh/known_hosts
  RSYNC_OPTS='-avz --delete'
  if [ -f .full-build ]; then
    unlink .full-build
    BUILD_REFNAME=
  fi
  if [ -n "$BUILD_REFNAME" ]; then
    RSYNC_OPTS="-c $RSYNC_OPTS$(find $FROM -mindepth 1 -maxdepth 1 \! -name 404.html \! -name '.*' -type f -printf ' --include /%P')"
    RSYNC_OPTS="$RSYNC_OPTS$(find $FROM -mindepth 1 -maxdepth 1 -type d \! -name _ -printf ' --include /%P --include /%P/**') --exclude **"
  fi
  rsync $RSYNC_OPTS -e "ssh -i $SSH_PRIVATE_KEY_PATH" $FROM/ "$HOST:$HOST_PATH"
  if [ -z "$BUILD_REFNAME" ]; then
    curl -X POST "https://api.cloudflare.com/client/v4/zones/$CLOUDFLARE_ZONE_ID/purge_cache" \
      -H "Content-Type:application/json" -H "Authorization: Bearer $CLOUDFLARE_CACHE_TOKEN" \
      --data '{"files":["https://docs.spring.io/spring-security"]}'
  fi
)
exit_code=$?

rm -f "$SSH_PRIVATE_KEY_PATH"

exit $exit_code