Deploy to dev on commit and prod on release

- Each commit deploys to dev
- Each release deploys to prod

Author: loafofpiecrust

.github/workflows/main.yml

@@ -3,8 +3,10 @@ name: Infrastructure Deployment
 # Controls when the action will run. Triggers the workflow on push or pull request
 # events but only for the main branch
 on:
+  release:
+    types: [released]
   push:
-    branches: [main, dev]
+    branches: [main]
     paths-ignore:
       - "**/README.md"
       - "**/readme.md"
@@ -17,9 +19,9 @@ concurrency:
 
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
-  # This workflow contains a single job called "build"
   build:
-    environment: ${{ github.ref == 'refs/heads/main' && 'Production' || 'Development' }}
+    runs-on: ubuntu-20.04
+    environment: ${{ github.event_name == 'release' && 'Production' || 'Development' }}
     env:
       MONGODB_PASSWORD: ${{ secrets.MONGODB_PASSWORD }}
       GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
@@ -34,14 +36,20 @@ jobs:
       GIT_REPOSITORY_URL: https://github.com/neu-dsg/dailp-encoding
       OAUTH_TOKEN: ${{ secrets.OAUTH_TOKEN }}
       RUST_LOG: info
-      TF_STAGE: ${{ github.ref == 'refs/heads/main' && 'prod' || 'dev' }}
-    # The type of runner that the job will run on
-    runs-on: ubuntu-latest
+      TF_STAGE: ${{ github.event_name == 'release' && 'prod' || 'dev' }}
 
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       - name: Checkout code
         uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+      - name: Push to release branch
+        if: ${{ github.event_name == 'release' }}
+        uses: ad-m/github-push-action@master
+        with:
+          branch: release
+          force: true
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@v1
         with:

.github/workflows/migrate-data.yml

@@ -3,7 +3,7 @@ on:
   workflow_dispatch:
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     environment: ${{ github.ref == 'refs/heads/main' && 'Production' || 'Development' }}
     env:
       MONGODB_PASSWORD: ${{ secrets.MONGODB_PASSWORD }}

.github/workflows/publish-website.yml

@@ -3,7 +3,7 @@ on:
   workflow_dispatch:
 jobs:
   publish:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     environment: ${{ github.ref == 'refs/heads/main' && 'Production' || 'Development' }}
     env:
       MONGODB_PASSWORD: ${{ secrets.MONGODB_PASSWORD }}

.github/workflows/terraform-plan.yml

@@ -9,7 +9,7 @@ on:
       - "flake.lock"
 jobs:
   plan:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     environment: ${{ github.base_ref == 'main' && 'Production' || 'Development' }}
     env:
       MONGODB_PASSWORD: ${{ secrets.MONGODB_PASSWORD }}

terraform/website.nix

@@ -92,7 +92,7 @@ with builtins; {
       };
 
     aws_amplify_branch = let
-      branchName = if config.setup.stage == "dev" then "dev" else "main";
+      branchName = if config.setup.stage == "dev" then "main" else "release";
       stageName =
         if config.setup.stage == "dev" then "DEVELOPMENT" else "PRODUCTION";
     in {