portfolio/.github/workflows/ci.yml at d9bb2e389da62f985c43aedd2eb8fd0fb6696db6 · DontMash/portfolio · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
name: ci

on:
  push:
    # branches:
    #   - main

jobs:
  build:
    environment: Production
    runs-on: ubuntu-latest
    steps:
      - name: Login to registry
        uses: docker/login-action@v3
        with:
          registry: registry.work.soren.codes
          username: ${{ secrets.REGISTRY_USER }}
          password: ${{ secrets.REGISTRY_PASSWORD }}

      - name: Checkout
        uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build and push
        uses: docker/build-push-action@v6
        with:
          push: true
          tags: registry.work.soren.codes/portfolio:latest
          build-args: |
            PREVIEW_SITE=${{ vars.PREVIEW_SITE }}
            REPOSITORY=${ GITHUB_REPOSITORY }
            BRAND_NAME=${{ vars.BRAND_NAME }}
            BRAND_DESCRIPTION=${{ vars.BRAND_DESCRIPTION }}
            BRAND_LOGO=${{ vars.BRAND_LOGO }}
            BRAND_TWITTER=${{ vars.BRAND_TWITTER }}
            EMAIL_USER=${{ vars.EMAIL_USER }}
            EMAIL_TARGET=${{ vars.EMAIL_TARGET }}
          secrets: |
            "KEYSTATIC_GITHUB_CLIENT_ID=${{ secrets.KEYSTATIC_GITHUB_CLIENT_ID }}"
            "KEYSTATIC_GITHUB_CLIENT_SECRET=${{ secrets.KEYSTATIC_GITHUB_CLIENT_SECRET }}"
            "KEYSTATIC_SECRET=${{ secrets.KEYSTATIC_SECRET }}"
            "PUBLIC_KEYSTATIC_GITHUB_APP_SLUG=${{ secrets.PUBLIC_KEYSTATIC_GITHUB_APP_SLUG }}"
            "RESEND_API_KEY=${{ secrets.RESEND_API_KEY }}"

      - name: Deploy
        uses: distributhor/workflow-webhook@v3
        with:
          webhook_url: ${{ secrets.DEPLOY_WEBHOOK_URL }}