* [v0.0.2] Adds Google and Github OAuth2 Authentication Adds to the API the feature of OAuth2 Authentication via two providers: Google and Github, and implements better handling of secrets * Create deploy.yml * Update deploy.yml * Update deploy.yml * Update deploy.yml * Fixes k3s * Update deploy.yml * Update deploy.yml Update deploy.yml update deploy.yml * Reemplements Frontend and Backend Connection * Final Configurations
67 lines
2.9 KiB
YAML
67 lines
2.9 KiB
YAML
name: remote ssh command
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- "main"
|
|
|
|
env:
|
|
FRONTEND_PATH: ${{ secrets.FRONTEND_PATH }}
|
|
TOKEN_SECRET: ${{ secrets.TOKEN_SECRET }}
|
|
ACCESS_TOKEN_DURATION: ${{ secrets.ACCESS_TOKEN_DURATION }}
|
|
REFRESH_TOKEN_DURATION: ${{ secrets.REFRESH_TOKEN_DURATION }}
|
|
DEFAULT_USER_FULLNAME: ${{ secrets.DEFAULT_USER_FULLNAME }}
|
|
DEFAULT_USER_EMAIL: ${{ secrets.DEFAULT_USER_EMAIL }}
|
|
DEFAULT_USER_USERNAME: ${{ secrets.DEFAULT_USER_USERNAME }}
|
|
DEFAULT_USER_PASSWORD: ${{ secrets.DEFAULT_USER_PASSWORD }}
|
|
GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}
|
|
GOOGLE_CLIENT_SECRET: ${{ secrets.GOOGLE_CLIENT_SECRET }}
|
|
GOOGLE_REDIRECT_URL: ${{ secrets.GOOGLE_REDIRECT_URL }}
|
|
OAUTH_GITHUB_CLIENT_ID: ${{ secrets.OAUTH_GITHUB_CLIENT_ID }}
|
|
OAUTH_GITHUB_CLIENT_SECRET: ${{ secrets.OAUTH_GITHUB_CLIENT_SECRET }}
|
|
OAUTH_GITHUB_REDIRECT_URL: ${{ secrets.OAUTH_GITHUB_REDIRECT_URL }}
|
|
POSTGRES_USER: ${{ secrets.POSTGRES_USER }}
|
|
POSTGRES_PASSWORD: ${{ secrets.POSTGRES_PASSWORD }}
|
|
POSTGRES_DB: ${{ secrets.POSTGRES_DB }}
|
|
REDIS_PASSWORD: ${{ secrets.REDIS_PASSWORD }}
|
|
|
|
jobs:
|
|
build:
|
|
name: Build
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: checkout
|
|
uses: actions/checkout@v2
|
|
|
|
- name: Inserts Prod Enviromental Variables
|
|
run: |
|
|
envsubst < $GITHUB_WORKSPACE/frontend/frontend-secret.template.yaml > $GITHUB_WORKSPACE/frontend/frontend-secret.yaml;
|
|
envsubst < $GITHUB_WORKSPACE/backend/backend-secret.template.yaml > $GITHUB_WORKSPACE/backend/backend-secret.yaml;
|
|
envsubst < $GITHUB_WORKSPACE/postgres/postgres-secret.template.yaml > $GITHUB_WORKSPACE/postgres/postgres-secret.yaml;
|
|
envsubst < $GITHUB_WORKSPACE/redis/redis-secret.template.yaml > $GITHUB_WORKSPACE/redis/redis-secret.yaml;
|
|
rm $GITHUB_WORKSPACE/frontend/frontend-secret.template.yaml;
|
|
rm $GITHUB_WORKSPACE/redis/redis-secret.template.yaml;
|
|
rm $GITHUB_WORKSPACE/postgres/postgres-secret.template.yaml;
|
|
rm $GITHUB_WORKSPACE/backend/backend-secret.template.yaml;
|
|
|
|
- name: copy file via ssh
|
|
uses: appleboy/scp-action@master
|
|
with:
|
|
host: ${{ secrets.HOST }}
|
|
username: ${{ secrets.USERNAME }}
|
|
key: ${{ secrets.SSH_KEY }}
|
|
port: ${{ secrets.PORT }}
|
|
source: "."
|
|
target: "infra-hideyoshi.com"
|
|
|
|
- name: executing remote ssh commands using password
|
|
uses: appleboy/ssh-action@master
|
|
with:
|
|
host: ${{ secrets.HOST }}
|
|
username: ${{ secrets.USERNAME }}
|
|
key: ${{ secrets.SSH_KEY }}
|
|
port: ${{ secrets.PORT }}
|
|
script: |
|
|
cd infra-hideyoshi.com;
|
|
./deploy.sh
|