fix: move sensitive environment variables to .env file and remove ARG… #7
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and Push Docker Image | |
| on: | |
| push: | |
| branches: | |
| - main | |
| env: | |
| REGISTRY: ghcr.io | |
| IMAGE_NAME: mcp-server | |
| jobs: | |
| build-and-push: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Log in to Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ${{ env.REGISTRY }} | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Create .env file | |
| run: | | |
| echo "BETTER_AUTH_SECRET=${{ secrets.BETTER_AUTH_SECRET }}" >> .env | |
| echo "BETTER_AUTH_URL=${{ secrets.BETTER_AUTH_URL }}" >> .env | |
| echo "NEXT_PUBLIC_AUTH_URL=${{ secrets.NEXT_PUBLIC_AUTH_URL }}" >> .env | |
| echo "DATABASE_URL=${{ secrets.DATABASE_URL }}" >> .env | |
| echo "GOOGLE_CLIENT_ID=${{ secrets.GOOGLE_CLIENT_ID }}" >> .env | |
| echo "GOOGLE_CLIENT_SECRET=${{ secrets.GOOGLE_CLIENT_SECRET }}" >> .env | |
| echo "PGHOST=${{ secrets.PGHOST }}" >> .env | |
| echo "PGUSER=${{ secrets.PGUSER }}" >> .env | |
| echo "PGPASSWORD=${{ secrets.PGPASSWORD }}" >> .env | |
| echo "PGDATABASE=${{ secrets.PGDATABASE }}" >> .env | |
| echo "PGPORT=${{ secrets.PGPORT }}" >> .env | |
| echo "NEO4J_URI=${{ secrets.NEO4J_URI }}" >> .env | |
| echo "NEO4J_USERNAME=${{ secrets.NEO4J_USERNAME }}" >> .env | |
| echo "NEO4J_PASSWORD=${{ secrets.NEO4J_PASSWORD }}" >> .env | |
| echo "NEO4J_DATABASE=${{ secrets.NEO4J_DATABASE }}" >> .env | |
| echo "AURA_INSTANCEID=${{ secrets.AURA_INSTANCEID }}" >> .env | |
| echo "AURA_INSTANCENAME=${{ secrets.AURA_INSTANCENAME }}" >> .env | |
| echo "UPSTASH_REDIS_REST_URL=${{ secrets.UPSTASH_REDIS_REST_URL }}" >> .env | |
| echo "UPSTASH_REDIS_REST_TOKEN=${{ secrets.UPSTASH_REDIS_REST_TOKEN }}" >> .env | |
| echo "PHONE_NUMBER=${{ secrets.PHONE_NUMBER }}" >> .env | |
| echo "COUNTRY_CODE=${{ secrets.COUNTRY_CODE }}" >> .env | |
| - name: Build and push Docker image | |
| uses: docker/build-push-action@v6 | |
| with: | |
| context: . | |
| push: true | |
| tags: ghcr.io/3xcaffeine/${{ env.IMAGE_NAME }}:latest | |
| - name: Log out from GHCR | |
| run: docker logout |