cfg/bin/check_config

#!/bin/bash
set -euo pipefail

DEBUG=${DEBUG:-false}
FETCH_INTERVAL=${FETCH_INTERVAL:-3600}
REPOS=( public secret )
SSH_KEY=${SSH_KEY:-fafnir}

# Print debug messages if enabled by ${DEBUG}
function debug {
  [[ "${DEBUG}" = "false" ]] && return
  echo "$@" >&2
}

function join_by { local d=$1; shift; echo -n "$1"; shift; printf "%s" "${@/#/$d}"; }

# Wrap git to work with git-dir and work-tree being in other locations
function gwrap {
  hub --git-dir=${HOME}/.cfg/${REPO} --work-tree=${HOME} $@
}

# Ensure we're connected to network before acting
if ! ( ping -q -c 1 8.8.8.8 >/dev/null ); then
  debug "No network connection, not checking"
  exit 0
fi

STAT_PARM="-c %Y"
[[ "$(uname -s)" = "Darwin" ]] && STAT_PARM="-f %m"

NEED_UPDATE=()
# Check repos for updates
for REPO in ${REPOS[@]}; do
  LAST_FETCH=0
  [ -f ~/.cfg/${REPO}/FETCH_HEAD ] && LAST_FETCH=$(stat ${STAT_PARM} ~/.cfg/${REPO}/FETCH_HEAD)
  if [ $(( $(date +%s) - ${LAST_FETCH} )) -gt ${FETCH_INTERVAL} ] || \
    [ $(wc -c ~/.cfg/${REPO}/FETCH_HEAD | cut -d' ' -f1) -eq 0 ]; then
    vault-sshadd ${SSH_KEY} 2>&1 >/dev/null || { echo "Unable to load key ${SSH_KEY}"; exit 1; }
    gwrap fetch -q origin master
  fi

  LOCAL=$(gwrap rev-parse HEAD)
  REMOTE=$(gwrap rev-parse FETCH_HEAD)

  if ! [[ "${LOCAL}" = "${REMOTE}" ]]; then
    NEED_UPDATE+=("'${REPO}'")
  fi
done

if [ ${#NEED_UPDATE[@]} -gt 0 ]; then
  echo "Config repo $(join_by ", " "${NEED_UPDATE[@]}") needs update"
fi