#!/usr/bin/env bash
set -euo pipefail
BASE=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)
cd "$BASE"
find bin config downloads evidence hooks images scripts sources templates -type f -print0 \
    | sort -z | xargs -0 sha256sum > SHA256SUMS
sha256sum README.md set-up-guide.md .gitignore >> SHA256SUMS
sha256sum --check --quiet SHA256SUMS
tar -czf "$BASE/../devsecops-gitea-offline-linux-amd64.tar.gz" \
    -C "$BASE/.." \
    devsecops-gitea/README.md devsecops-gitea/set-up-guide.md devsecops-gitea/.gitignore devsecops-gitea/SHA256SUMS \
    devsecops-gitea/bin devsecops-gitea/config devsecops-gitea/downloads \
    devsecops-gitea/evidence devsecops-gitea/hooks devsecops-gitea/images \
    devsecops-gitea/scripts devsecops-gitea/sources devsecops-gitea/templates
cd "$BASE/.."
sha256sum devsecops-gitea-offline-linux-amd64.tar.gz > devsecops-gitea-offline-linux-amd64.tar.gz.sha256
echo "Offline archive ready in $BASE/.. (no live data or credentials included)."