#!/usr/bin/env bash
set -Eeuo pipefail
cd "${BASH_SOURCE%/*}/"

echo "Unlocking git-crypt repositories and loading secrets..."
git crypt unlock
pushd ../vps-state/
git crypt unlock
popd
source .envrc
echo "Done."

# shellcheck disable=SC2139
alias ssh="ssh -i secrets/id_rsa root@$TLD"

echo "Shutting down running containers..."
ssh "cd /home/vps/ && docker-compose down"
echo "Done."

echo "Running 'terraform apply'..."
terraform apply
echo "Done."

echo "Storing .tfstate file"
pushd ../vps-state/
git add secrets/terraform.tfstate secrets/terraform.tfstate.backup
git commit -m "CI: update Terraform .tfstate files"
git push origin master
popd
echo "Done."

echo "Locking git-crypt repositories back..."
git crypt lock
pushd ../vps-state/
git crypt lock
popd
echo "Done."