dns/.forgejo/workflows/ci.yaml

on:
  push:
    branches:
      - 'main'

jobs:
  deploy_script:
    runs-on: linux_amd64
    steps:
      - name: Apply zone changes
        shell: bash
        run: |
          CURRENT_ZONE=
          echo "Preparing to update ${{ vars.DNS_SERVER }}..."
          git clone ${{ gitea.server_url }}/${{ gitea.repository }} dns
          cd dns
          git diff HEAD^ HEAD > zone_diff.txt
          echo "${{ secrets.TSIG_KEY }}" | base64 -d > temp_keyfile
          while IFS= read -r line; do
            case "$line" in
              "--- "*".zone")
                NAME=$(echo "$line" .zone | sed 's/--- //' | sed 's|a/||')
                CURRENT_ZONE=$(basename $NAME)
                echo "*** Updating $CURRENT_ZONE"
                ;;
              "--- "*)
                CURRENT_ZONE=
                ;;
              "+++"*)
                ;;
              "-"* | "+"*)
                if [ ! -z $CURRENT_ZONE ]; then
                  if [[ $line == -* ]]; then # Enregistrement supprimé
                    RECORD=$(echo "$line" | sed 's/^+//' | sed 's/^\([^ ]\+\)\(\s\+\)\(IN A\)\(\s\+\)[^ ]\+/\1.a-lec.org.\2\3/')
                    echo "update delete $RECORD"
                    echo -e "server ${{vars.DNS_SERVER}}\nupdate delete $RECORD\nsend" > temp_delete
                    nsupdate -k temp_keyfile temp_delete
                    rm temp_delete
                  elif [[ $line == +* ]]; then # Enregistrement ajouté
                    RECORD=$(echo "$line" | sed 's/^+//' | sed 's/^\([^ ]\+\)\(\s\+\)\(IN A\)/\1.a-lec.org.\2\3/')
                    echo "update add $RECORD"
                    echo -e "server ${{vars.DNS_SERVER}}\nupdate add $RECORD\nsend" > temp_add
                    nsupdate -k temp_keyfile temp_add
                    rm temp_add
                  fi
                fi
                ;;
            esac
          done < zone_diff.txt
          rm temp_keyfile