s3-docs-sync.yml

name: Sync Docs to S3

permissions:
    contents: read

on:
    workflow_dispatch: {}
    push:
        branches: ['main']
        paths: ['docs/**']

jobs:
    sync-to-s3:
        runs-on: ubuntu-latest

        steps:
            - name: Checkout repository
              uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

            - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6
              with:
                  node-version: 22

            - name: Install dependencies
              run: npm ci
              
            - name: Build website
              run: npm run build
              working-directory: "docs"

            - name: Configure AWS credentials
              uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # v5
              with:
                  aws-access-key-id: ${{ secrets.AWS_S3_ACCESS_KEY }}
                  aws-secret-access-key: ${{ secrets.AWS_S3_SECRET_ACCESS_KEY }}
                  aws-region: us-east-1

            - name: Sync docs to S3
              run: |
                  aws s3 sync build s3://calm.finos.org/ --delete --include "*" --exclude "advent/*" --exclude "controls/*" --exclude "draft/*" --exclude "getting-started/*" --exclude "interfaces/*" --exclude "release/*" --exclude "samples/*" --exclude "video/*" --exclude "workshop/*"
              working-directory: "docs"

            - name: Invalidate CloudFront cache
              run: |
                  aws cloudfront create-invalidation --distribution-id ${{ secrets.AWS_CLOUDFRONT_DISTRIBUTION_ID }} --paths "/*"