asxpi/asxpio
asxpi/asxpio
1
0
Fork 0
Code Issues Pull requests Packages 1 Activity Actions

deploy: write invoicing env vars to .env
All checks were successful
Build and Deploy to Production / build (push) Successful in 46s
Details
Build and Deploy to Production / deploy (push) Successful in 24s
Details

Browse source 
Extends the .env heredoc the workflow drops on the prod host with:

- ADMIN_USER / ADMIN_PASSWORD     — gate /admin/*
- DATABASE_URL                    — points at the storage stack's Postgres
- S3_* (endpoint, bucket, creds)  — MinIO; S3_PUBLIC_ENDPOINT is the
                                    s3.asxp.io hostname used only for
                                    presigning so browser-facing URLs
                                    resolve over Traefik+TLS.

Non-secret values stay hardcoded in the workflow; secrets come from
Forgejo. ASXPIO_DB_PASSWORD / S3 creds must match the corresponding
secrets on the storage repo or the app can't authenticate.
This commit is contained in:
Sergei Poljanski 2026-05-26 18:07:15 +03:00
commit dc40faf5df
Signed by: asxpi
GPG key ID: 4F8851660FA4121B
1 changed files with 15 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

16
.forgejo/workflows/deploy.yaml
View file

@ -61,11 +61,16 @@ jobs:
env: env:
SESSION_SECRET: ${{ secrets.SESSION_SECRET }} SESSION_SECRET: ${{ secrets.SESSION_SECRET }}
SMTP_PASSWORD: ${{ secrets.SMTP_PASSWORD }} SMTP_PASSWORD: ${{ secrets.SMTP_PASSWORD }}
ADMIN_USER: ${{ secrets.ADMIN_USER }}
ADMIN_PASSWORD: ${{ secrets.ADMIN_PASSWORD }}
ASXPIO_DB_PASSWORD: ${{ secrets.ASXPIO_DB_PASSWORD }}
ASXPIO_S3_ACCESS_KEY: ${{ secrets.ASXPIO_S3_ACCESS_KEY }}
ASXPIO_S3_SECRET_KEY: ${{ secrets.ASXPIO_S3_SECRET_KEY }}
with: with:
host: ${{ secrets.DEPLOY_IP }} host: ${{ secrets.DEPLOY_IP }}
username: ${{ secrets.DEPLOY_USER }} username: ${{ secrets.DEPLOY_USER }}
key: ${{ secrets.DEPLOY_SSH_KEY }} key: ${{ secrets.DEPLOY_SSH_KEY }}
envs: SESSION_SECRET,SMTP_PASSWORD envs: SESSION_SECRET,SMTP_PASSWORD,ADMIN_USER,ADMIN_PASSWORD,ASXPIO_DB_PASSWORD,ASXPIO_S3_ACCESS_KEY,ASXPIO_S3_SECRET_KEY
script_stop: true script_stop: true
script: | script: |
umask 077 umask 077
@ -79,6 +84,15 @@ jobs:
SMTP_PASSWORD=${SMTP_PASSWORD} SMTP_PASSWORD=${SMTP_PASSWORD}
MAIL_FROM=IE Sergei Poljanski Contact Form <me@asxp.io> MAIL_FROM=IE Sergei Poljanski Contact Form <me@asxp.io>
MAIL_TO=ie@asxp.io MAIL_TO=ie@asxp.io
ADMIN_USER=${ADMIN_USER}
ADMIN_PASSWORD=${ADMIN_PASSWORD}
DATABASE_URL=postgres://asxpio:${ASXPIO_DB_PASSWORD}@postgres:5432/asxpio
S3_ENDPOINT=http://minio:9000
S3_PUBLIC_ENDPOINT=https://s3.asxp.io
S3_REGION=us-east-1
S3_BUCKET=asxpio-invoices
S3_ACCESS_KEY=${ASXPIO_S3_ACCESS_KEY}
S3_SECRET_KEY=${ASXPIO_S3_SECRET_KEY}
EOF EOF
chmod 600 /opt/asxpio/.env chmod 600 /opt/asxpio/.env