chore: update versions (#1089) #11
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy Website to ECS | |
| on: | |
| push: | |
| branches: [main] | |
| paths: | |
| - 'apps/website/**' | |
| - 'packages/**' | |
| - 'pnpm-lock.yaml' | |
| - '.github/workflows/deploy-website.yml' | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| AWS_DEFAULT_REGION: "us-east-1" | |
| jobs: | |
| deploy: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Debug AWS creds | |
| shell: bash | |
| run: | | |
| set -e | |
| echo "AWS_ACCESS_KEY_ID present? $([ -n "${AWS_ACCESS_KEY_ID:-}" ] && echo yes || echo no)" | |
| echo "AWS_SECRET_ACCESS_KEY present? $([ -n "${AWS_SECRET_ACCESS_KEY:-}" ] && echo yes || echo no)" | |
| aws sts get-caller-identity | |
| env: | |
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| AWS_DEFAULT_REGION: us-east-1 | |
| - name: Setup Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: '22' | |
| - uses: pnpm/action-setup@v4 | |
| with: | |
| version: 11.15.1 | |
| - name: Creating .npmrc | |
| run: | | |
| "${GITHUB_WORKSPACE}/scripts/create-npmrc.sh" "${{ secrets.NPM_TOKEN }}" | |
| env: | |
| NPM_TOKEN: ${{ secrets.NPM_TOKEN }} | |
| - name: Install dependencies | |
| run: pnpm install --no-frozen-lockfile | |
| - name: Build | |
| run: pnpm build | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| with: | |
| aws-region: us-east-1 | |
| aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| - name: Deploy (inline deploy:web) | |
| env: | |
| DOCKER_DEFAULT_PLATFORM: linux/amd64 | |
| NPM_TOKEN: ${{ secrets.NPM_TOKEN }} | |
| AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| AWS_DEFAULT_REGION: us-east-1 | |
| NODE_ENV: production | |
| run: | | |
| cd apps/website | |
| REGISTRY="$(aws sts get-caller-identity --query Account --output text).dkr.ecr.us-east-1.amazonaws.com" | |
| rm -rf pruned | |
| pnpm --filter @cutting/website build | |
| pnpm --filter @cutting/website --prod deploy pruned | |
| docker build --build-arg CPPFLAGS="-DPNG_ARM_NEON_OPT=0" -t website_server:latest -f Dockerfile . | |
| aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin "$REGISTRY" | |
| docker tag website_server:latest "$REGISTRY/website_server:latest" | |
| docker push "$REGISTRY/website_server:latest" | |
| aws ecs update-service --cluster website --service website --region us-east-1 --force-new-deployment | |
| rm -rf ./pruned |