ci: sync build to s3 bucket

We push changes to s3, and not to Docker Hub.

.github/workflows/deploy_s3.yml

@@ -0,0 +1,36 @@
+# Build site and sync with S3
+# To test this action with act (https://github.com/nektos/act) run:
+# act --secret ACADEMY_S3_ACCESS_KEY_ID=xxx --secret ACADEMY_S3_SECRET_ACCESS_KEY=xxx --secret ACADEMY_S3_REGION=xxx --secret ACADEMY_S3_BUCKET=xxx
+name: Deploy to S3
+
+on:
+  push:
+    branches: [ master, main ]
+
+jobs:
+  deploy_to_s3:
+    name: Build and sync with S3
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v4
+
+      - name: Install Python requirements
+        run: pip install -r requirements.txt
+
+      - name: Install system requirements
+        run: apt update && apt install -y pandoc
+
+      - name: Build site
+        run: make build
+
+      # https://github.com/aws-actions/configure-aws-credentials?tab=readme-ov-file#assumerole-with-static-iam-credentials-in-repository-secrets
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-access-key-id: ${{ secrets.ACADEMY_S3_ACCESS_KEY_ID }}
+          aws-secret-access-key: ${{ secrets.ACADEMY_S3_SECRET_ACCESS_KEY }}
+          aws-region: ${{ secrets.ACADEMY_S3_REGION }}
+
+      - name: Sync build assets with S3
+        run: aws s3 sync --delete _build/academy/ s3://${{ secrets.ACADEMY_S3_BUCKET }}

Makefile

@@ -6,8 +6,8 @@ clean: ## Clean any existing site
 	rm -rf contents/_build
 
 build: clean ## Build site
-	@python build.py
-	@cp -r layout/static _build/academy/static
+	python build.py
+	cp -r layout/static _build/academy/static
 
 watch: build ## Watch for changes and build site
 	while true; do $(MAKE) wait-for-change build || true; done