Repository navigation
104 lines (90 loc) · 3.67 KB
/
Copy pathdeployment-production.yml
File metadata and controls
104 lines (90 loc) · 3.67 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
name: Deploy Production
on:
push:
branches:
- main
workflow_dispatch:
permissions:
actions: read
contents: read
deployments: write
issues: write
pull-requests: write
jobs:
deploy-production:
name: Deploy Production
runs-on: ubuntu-latest
environment: production
env:
ASTRO_DB_APP_TOKEN: ${{ secrets.ASTRO_DB_APP_TOKEN }}
ASTRO_DB_REMOTE_URL: ${{ secrets.ASTRO_DB_REMOTE_URL }}
CRON_SECRET: ${{ secrets.CRON_SECRET }}
PUBLIC_GOOGLE_MAPS_API_KEY: ${{ vars.PUBLIC_GOOGLE_MAPS_API_KEY }}
PUBLIC_GOOGLE_MAP_ID: ${{ vars.PUBLIC_GOOGLE_MAP_ID }}
PUBLIC_SENTRY_DSN: ${{ vars.PUBLIC_SENTRY_DSN }}
PUBLIC_UPSTASH_SEARCH_READONLY_TOKEN: ${{ vars.PUBLIC_UPSTASH_SEARCH_READONLY_TOKEN }}
PUBLIC_UPSTASH_SEARCH_REST_URL: ${{ vars.PUBLIC_UPSTASH_SEARCH_REST_URL }}
RESEND_API_KEY: ${{ secrets.RESEND_API_KEY }}
SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
VERCEL_ORG_ID: ${{ vars.VERCEL_ORG_ID }}
VERCEL_PROJECT_ID: ${{ vars.VERCEL_PROJECT_ID }}
WEBMENTION_IO_TOKEN: ${{ secrets.WEBMENTION_IO_TOKEN }}
permissions:
actions: read
contents: read
deployments: write
issues: write
pull-requests: write
steps:
- name: Checkout repository
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Setup Node
uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
with:
node-version-file: .nvmrc
cache: npm
- name: Install dependencies
run: npm ci
- name: Install Playwright Chromium (with system deps)
run: npx playwright install --with-deps chromium
- name: Install Vercel CLI
run: npm install --global vercel@latest
- name: Create Vercel project config
run: |
mkdir -p .vercel
cat > .vercel/project.json <<EOF
{"projectId":"$VERCEL_PROJECT_ID","orgId":"$VERCEL_ORG_ID","settings":{"framework":"astro","installCommand":"npm ci"}}
EOF
- name: Vercel build (production)
env:
VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
NODE_ENV: production
run: vercel build --prod --token="${VERCEL_TOKEN}"
##
# This requires Playwright to succeed when triggering e2e tests from a merge_group
# event. This allows moving long-running jobs into a slot in the total workflow where
# they don't run on every push to a pull request, but are still required to deploy
# to production and merge to main. Merge groups are only available in organization
# repos so disabled for now.
##
#- name: Require Playwright success
# if: github.event_name == 'push'
# uses: ./.github/actions/require-playwright-success
# with:
# github_token: ${{ github.token }}
# expected_sha: ${{ github.sha }}
# workflow_file: playwright.yml
- name: Deploy to Vercel (production)
uses: ./.github/actions/deploy-to-vercel-action
with:
GITHUB_TOKEN: ${{ github.token }}
VERCEL_TOKEN: ${{ secrets.VERCEL_TOKEN }}
VERCEL_ORG_ID: ${{ vars.VERCEL_ORG_ID }}
VERCEL_PROJECT_ID: ${{ vars.VERCEL_PROJECT_ID }}
PRODUCTION: true
PUBLIC_GOOGLE_MAPS_API_KEY: ${{ vars.PUBLIC_GOOGLE_MAPS_API_KEY }}
PUBLIC_GOOGLE_MAP_ID: ${{ vars.PUBLIC_GOOGLE_MAP_ID }}
PUBLIC_SENTRY_DSN: ${{ vars.PUBLIC_SENTRY_DSN }}
PUBLIC_UPSTASH_SEARCH_REST_URL: ${{ vars.PUBLIC_UPSTASH_SEARCH_REST_URL }}
PUBLIC_UPSTASH_SEARCH_READONLY_TOKEN: ${{ vars.PUBLIC_UPSTASH_SEARCH_READONLY_TOKEN }}
GITHUB_DEPLOYMENT_ENV: Production