deploy.sh

#!/bin/bash
set -e

# Sync the contents of this directory where the site should have been built
SOURCE_DIR=public
# Where to copy master
TARGET_DIR=/home/deploy/www/strichliste.org

if [ ! -d "$SOURCE_DIR" ]; then
  echo "SOURCE_DIR ($SOURCE_DIR) does not exist, build the source directory before deploying"
  exit 1
fi

if [ -n "$TRAVIS_BUILD_ID" ]; then
  # Set the following environment variables in the travis configuration (.travis.yml)
  #
  #   DEPLOY_BRANCH    - The only branch that Travis should deploy from
  #   ENCRYPTION_LABEL - The label assigned when encrypting the SSH key using travis encrypt-file
  #
  echo TRAVIS_BRANCH: $TRAVIS_BRANCH
  echo DEPLOY_BRANCH: $DEPLOY_BRANCH
  echo ENCRYPTION_LABEL: $ENCRYPTION_LABEL
  if [[ "$TRAVIS_BRANCH" != "$DEPLOY_BRANCH" ]] && [[ "$TRAVIS_PULL_REQUEST" == "false" ]]; then
    echo "Travis should only deploy from the DEPLOY_BRANCH ($DEPLOY_BRANCH) branch"
    exit 0
  else
    ENCRYPTED_KEY_VAR=encrypted_${ENCRYPTION_LABEL}_key
    ENCRYPTED_IV_VAR=encrypted_${ENCRYPTION_LABEL}_iv
    ENCRYPTED_KEY=${!ENCRYPTED_KEY_VAR}
    ENCRYPTED_IV=${!ENCRYPTED_IV_VAR}

    # The `deploy_id_rsa.enc` file should have been added to the repo and should
    # have been created from the deploy private key using `travis encrypt-file`
    openssl aes-256-cbc -K $ENCRYPTED_KEY -iv $ENCRYPTED_IV -in deploy_id_rsa.enc -out deploy_id_rsa -d

    chmod 600 deploy_id_rsa
    eval `ssh-agent -s`
    ssh-add deploy_id_rsa
  fi
fi

rsync -zvrt --omit-dir-times --delete --checksum -e ssh $SOURCE_DIR/ deploy@jade.strichliste.org:$TARGET_DIR