build.sh

#!/bin/bash

set -euo pipefail

openpgpkey_hash() {
	key_id="$1"

	gpg-wks-client --print-wkd-hash "$(
		gpg --list-keys --with-colons "$key_id" |
			awk -F: '/^uid:/ { print($10) }'
	)" |
		cut '-d ' -f1
}

well_known_openpgpkey() {
	key_id="$1"

	key_hash="$(openpgpkey_hash "$key_id")"

	mkdir -p 'out/.well-known/openpgpkey/hu'
	gpg --export "$key_id" >"out/.well-known/openpgpkey/hu/$key_hash"
}

blog_out_dirname() {
	out="$1"
	out="${out#src/blog/}"
	out="${out%.md}"
	printf '%s' "$out"
}

blog_title() (
	trap 'rm -f title.html' EXIT
	printf '$title$' > title.html
	pandoc \
		--fail-if-warnings \
		--output - --to html5 --template title.html \
		--from markdown-smart "$1"
)

blog_pubdate() (
	trap 'rm -f pubdate.html' EXIT
	printf '$date$' > pubdate.html
	date="$(
		pandoc \
			--fail-if-warnings \
			--output - --to html5 --template pubdate.html \
			--from markdown-smart "$1"
	)"
	date --date "$date" --iso-8601=seconds --utc
)

rm -rf out
mkdir -p out


cp -R src/.well-known out/


# /.well-known/openpgpkey/
well_known_openpgpkey 'C234FF14FC3895C194A705AE89A451A9C0E3AF0B'
well_known_openpgpkey '4FD3B6598098B909B9B577A068CBF71768A68A0A'


# CSS
css="$(sassc --style compressed src/style.scss)"


# /index.html
pandoc \
	--fail-if-warnings \
	--output out/index.html --to html5 --template templates/index.html \
	--variable "css:$css" \
	--filter pandoc-filter \
	--from markdown-smart \
	src/index.md


# /blog/*/index.html
pgp_key_id='4FD3B6598098B909B9B577A068CBF71768A68A0A'
pgp_key_hash="$(openpgpkey_hash "$pgp_key_id")"

previous=''
current=''
for next in src/blog/* ''; do
	if [ "$next" == 'src/blog/index.md' ]; then
		continue
	fi

	if [ -n "$current" ]; then
		previous_out=''
		previous_title=''
		if [ -n "$previous" ]; then
			previous_out="$(blog_out_dirname "$previous")"
			previous_title="$(blog_title "$previous")"
		fi

		current_out="$(blog_out_dirname "$current")"

		next_out=''
		next_title=''
		if [ -n "$next" ]; then
			next_out="$(blog_out_dirname "$next")"
			next_title="$(blog_title "$next")"
		fi

		mkdir -p "out/blog/$current_out"
		pandoc \
			--fail-if-warnings \
			--output "out/blog/$current_out/index.html" --to html5 --template templates/blog/post.html \
			--variable "css:$css" \
			--variable "blog_previous_filename:$previous_out" \
			--variable "blog_previous_title:$previous_title" \
			--variable "blog_current_dirname:$current_out" \
			--variable "blog_next_filename:$next_out" \
			--variable "blog_next_title:$next_title" \
			--variable "pgp_key_id:$pgp_key_id" \
			--variable "pgp_key_hash:$pgp_key_hash" \
			--filter pandoc-filter \
			--from markdown-smart \
			"$current"
	fi

	previous="$current"
	current="$next"
done


# /blog/index.html

blog_index_content=''

for current in src/blog/*; do
	if [ "$current" == 'src/blog/index.md' ]; then
		continue
	fi

	current_out="$(blog_out_dirname "$current")"
	current_title="$(blog_title "$current")"

	blog_index_content="$(printf -- '- [%s](%s)\n%s' "$current_title" "/blog/$current_out/" "$blog_index_content")"
done

pandoc \
	--fail-if-warnings \
	--output out/blog/index.html --to html5 --template templates/blog/index.html \
	--variable "css:$css" \
	--from markdown-smart src/blog/index.md <(printf '%s' "$blog_index_content")


# /blog/index.xml

blog_feed_entries=''

for current in src/blog/*; do
	if [ "$current" == 'src/blog/index.md' ]; then
		continue
	fi

	current_out="$(blog_out_dirname "$current")"
	current_title="$(blog_title "$current")"

	blog_feed_entries="$(
		pandoc \
			--fail-if-warnings \
			--output - --template templates/blog/post.xml \
			--variable "blog_current_dirname:$current_out" \
			--variable "blog_current_pubdate:$(blog_pubdate "$current")" \
			--from markdown-smart "$current"
	)$blog_feed_entries"
done

printf "<?xml version=\"1.0\" encoding=\"utf-8\" standalone=\"yes\"?>
<feed xmlns=\"http://www.w3.org/2005/Atom\">
	<id>https://www.arnavion.dev/blog/</id>
	<title>Blog - www.arnavion.dev</title>
	<updated>$(date --iso-8601=seconds --utc)</updated>
	<link href=\"https://www.arnavion.dev/blog/\" />
	<link href=\"https://www.arnavion.dev/blog/index.xml\" rel=\"self\" />
%s
</feed>
" "$blog_feed_entries" > out/blog/index.xml

echo 'OK'


if [ "${1:-}" = 'publish' ]; then
	AZURE_WWW_RESOURCE_GROUP_NAME='arnavion-dev-www'
	AZURE_WWW_STORAGE_ACCOUNT_NAME='wwwarnaviondev'
	AZURE_WWW_CDN_PROFILE_NAME='cdn-profile'
	AZURE_WWW_CDN_ENDPOINT_NAME='www-arnavion-dev'

	AZURE_WWW_STORAGE_ACCOUNT_CONNECTION_STRING="$(
		az storage account show-connection-string \
			--resource-group "$AZURE_WWW_RESOURCE_GROUP_NAME" --name "$AZURE_WWW_STORAGE_ACCOUNT_NAME" \
			--query connectionString --output tsv
	)"

	# Strip trailing newline to match the HTML output
	css_sha256="$(<<< "$css" head -c -1 | openssl dgst -binary -sha256 | base64 -w 0)"

	cdn_endpoint_delivery_policy_rules="$(jq --null-input --compact-output \
		--arg CSP "default-src 'none'; style-src 'sha256-$css_sha256'" \
		'[{
			"order": 0,
			"name": "Global",
			"conditions": [],
			"actions": [{
				"name": "ModifyResponseHeader",
				"parameters": {
					"headerAction": "Append",
					"headerName": "access-control-allow-origin",
					"value": "*"
				}
			}, {
				"name": "ModifyResponseHeader",
				"parameters": {
					"headerAction": "Append",
					"headerName": "content-security-policy",
					"value": $CSP
				}
			}]
		}, {
			"order": 1,
			"name": "RedirectToWWW",
			"conditions": [{
				"name": "RequestHeader",
				"parameters": {
					"selector": "host",
					"operator": "Equal",
					"matchValues": ["arnavion.dev"],
					"transforms": ["Lowercase"]
				}
			}, {
				"name": "UrlPath",
				"parameters": {
					"operator": "BeginsWith",
					"negateCondition": true,
					"matchValues": ["/.well-known/"]
				}
			}],
			"actions": [{
				"name": "UrlRedirect",
				"parameters": {
					"customHostname": "www.arnavion.dev",
					"destinationProtocol": "Https",
					"redirectType": "PermanentRedirect"
				}
			}]
		}, {
			"order": 2,
			"name": "ContentTypeWellKnownMatrix",
			"conditions": [{
				"name": "UrlPath",
				"parameters": {
					"operator": "Equal",
					"matchValues": [
						"/.well-known/matrix/client",
						"/.well-known/matrix/server"
					]
				}
			}],
			"actions": [{
				"name": "ModifyResponseHeader",
				"parameters": {
					"headerAction": "Overwrite",
					"headerName": "content-type",
					"value": "application/json"
				}
			}]
		}, {
			"order": 3,
			"name": "ContentTypeBlogFeed",
			"conditions": [{
				"name": "UrlPath",
				"parameters": {
					"operator": "Equal",
					"matchValues": ["/blog/index.xml"]
				}
			}],
			"actions": [{
				"name": "ModifyResponseHeader",
				"parameters": {
					"headerAction": "Overwrite",
					"headerName": "content-type",
					"value": "application/atom+xml"
				}
			}]
		}]'
	)"

	for pattern in '.well-known/*' 'index.html' 'blog/*'; do
		az storage blob delete-batch \
			--connection-string "$AZURE_WWW_STORAGE_ACCOUNT_CONNECTION_STRING" \
			--source '$web' \
			--pattern "$pattern" \
			--verbose
	done

	az storage blob upload-batch \
		--connection-string "$AZURE_WWW_STORAGE_ACCOUNT_CONNECTION_STRING" \
		--source "$PWD/out" --destination '$web' --type block \
		--verbose

	az cdn endpoint update \
		--resource-group "$AZURE_WWW_RESOURCE_GROUP_NAME" --profile-name "$AZURE_WWW_CDN_PROFILE_NAME" --name "$AZURE_WWW_CDN_ENDPOINT_NAME" \
		--set "deliveryPolicy.rules=$cdn_endpoint_delivery_policy_rules"

	az cdn endpoint purge \
		--resource-group "$AZURE_WWW_RESOURCE_GROUP_NAME" --profile-name "$AZURE_WWW_CDN_PROFILE_NAME" --name "$AZURE_WWW_CDN_ENDPOINT_NAME" \
		--content-paths '/*'
fi