docs: 添加环境变量 #5
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # 工作流名称 | |
| name: Deploy to Cloudflare | |
| # 触发条件 | |
| on: | |
| push: | |
| branches: | |
| - main | |
| workflow_dispatch: | |
| jobs: | |
| # 新增一个 job 用于检查密钥是否存在 | |
| check_credentials: | |
| runs-on: ubuntu-latest | |
| name: Check for Cloudflare Credentials | |
| outputs: | |
| has_creds: ${{ steps.cf_creds.outputs.has_creds }} | |
| steps: | |
| - name: Check for Cloudflare credentials | |
| id: cf_creds | |
| run: | | |
| if [ -z "${{ secrets.CF_API_TOKEN }}" ] || [ -z "${{ secrets.CF_ACCOUNT_ID }}" ]; then | |
| echo "Cloudflare credentials not found, skipping deployment." | |
| echo "has_creds=false" >> $GITHUB_OUTPUT | |
| else | |
| echo "Cloudflare credentials found." | |
| echo "has_creds=true" >> $GITHUB_OUTPUT | |
| fi | |
| # 部署 job，依赖于 check_credentials job 的结果 | |
| deploy: | |
| runs-on: ubuntu-latest | |
| name: Deploy | |
| needs: check_credentials # 依赖于上一个 job | |
| if: needs.check_credentials.outputs.has_creds == 'true' # 只有在密钥存在时才运行 | |
| steps: | |
| # 检出代码 | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| # 设置 pnpm (版本由根目录 package.json 的 "packageManager" 字段决定) | |
| - name: Setup pnpm | |
| uses: pnpm/action-setup@v4 | |
| # 设置 Node.js 环境 | |
| - name: Setup Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version-file: 'package.json' | |
| cache: 'pnpm' | |
| # 安装依赖 | |
| - name: Install dependencies | |
| # 修复：添加 --no-frozen-lockfile 标志 | |
| # 这会告诉 pnpm 根据 package.json 的内容来安装依赖，即使 pnpm-lock.yaml 文件不是最新的。 | |
| # 这样就解决了在部署环境中因锁文件不同步导致的安装失败问题。 | |
| run: pnpm install --no-frozen-lockfile | |
| # 运行构建 | |
| - name: Build | |
| run: pnpm run build | |
| # 配置 Wrangler (替换占位符) | |
| - name: Configure Wrangler | |
| run: | | |
| sed -i "s#\${D1_DATABASE_ID}#${D1_DATABASE_ID}#g" wrangler.toml | |
| sed -i "s#\${D1_DATABASE_NAME}#${D1_DATABASE_NAME}#g" wrangler.toml | |
| sed -i "s#\${EMAIL_DOMAIN}#${EMAIL_DOMAIN}#g" wrangler.toml | |
| sed -i "s#\${COOKIES_SECRET}#${COOKIES_SECRET}#g" wrangler.toml | |
| sed -i "s#\${TURNSTILE_KEY}#${TURNSTILE_KEY}#g" wrangler.toml | |
| sed -i "s#\${TURNSTILE_SECRET}#${TURNSTILE_SECRET}#g" wrangler.toml | |
| env: | |
| D1_DATABASE_ID: ${{ secrets.D1_DATABASE_ID }} | |
| D1_DATABASE_NAME: ${{ secrets.D1_DATABASE_NAME }} | |
| EMAIL_DOMAIN: ${{ secrets.EMAIL_DOMAIN }} | |
| COOKIES_SECRET: ${{ secrets.COOKIES_SECRET }} | |
| TURNSTILE_KEY: ${{ secrets.TURNSTILE_KEY }} | |
| TURNSTILE_SECRET: ${{ secrets.TURNSTILE_SECRET }} | |
| # 新增：在部署前应用 D1 数据库迁移 | |
| # 这一步会明确地告诉 Wrangler 远程执行 D1 数据库的迁移脚本。 | |
| - name: Apply D1 Migrations | |
| run: npx wrangler d1 migrations apply ${{ secrets.D1_DATABASE_NAME }} --remote | |
| env: | |
| CLOUDFLARE_API_TOKEN: ${{ secrets.CF_API_TOKEN }} | |
| CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CF_ACCOUNT_ID }} | |
| # 部署到 Cloudflare Workers | |
| - name: Deploy | |
| uses: cloudflare/wrangler-action@v3 | |
| with: | |
| apiToken: ${{ secrets.CF_API_TOKEN }} | |
| accountId: ${{ secrets.CF_ACCOUNT_ID }} |