fix:adapt for changed secrets #35
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Java CI for Embula with Maven | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up JDK 21 | |
| uses: actions/setup-java@v4 | |
| with: | |
| java-version: '21' | |
| distribution: 'temurin' | |
| cache: maven | |
| - name: Build with Maven | |
| run: mvn clean install | |
| - name: Set up QEMU for multi-arch | |
| uses: docker/setup-qemu-action@v2 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v2 | |
| - name: Log in to Docker Hub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKER_USERNAME }} | |
| password: ${{ secrets.DOCKER_PASSWORD }} | |
| - name: Build & push multi arch Docker image | |
| uses: docker/build-push-action@v6 | |
| with: | |
| context: . | |
| file: ./Dockerfile | |
| push: true | |
| tags: docker.io/dewmink/embula-backend:latest | |
| platforms: linux/amd64,linux/arm64 | |
| - name: Deploy to EC2 | |
| uses: appleboy/ssh-action@v0.1.7 | |
| with: | |
| host: ${{ secrets.EC2_HOST }} | |
| username: ${{ secrets.EC2_USER }} | |
| key: ${{ secrets.EC2_KEY }} | |
| envs: MYSQL_URL,MYSQL_USERNAME,MYSQL_PASSWORD,JWT_SECRET,TOKEN_VALIDITY,REFRESH_TOKEN_VALIDITY,STRIPE_SECRET,EMAIL_USERNAME,EMAIL_PASSWORD,ADMIN_EMAIL | |
| script: | | |
| docker pull dewmink/embula-backend:latest | |
| docker stop embula-backend || true | |
| docker rm embula-backend || true | |
| docker run -d --name embula-backend -p 8081:8081 -e MYSQL_URL="$MYSQL_URL" -e USERNAME="$USERNAME" -e PASSWORD="$PASSWORD" -e JWT_SECRET="$JWT_SECRET" -e TOKEN_VALIDITY="$TOKEN_VALIDITY" -e REFRESH_TOKEN_VALIDITY="$REFRESH_TOKEN_VALIDITY" -e STRIPE_SECRET="$STRIPE_SECRET" -e EMAIL_USERNAME="$EMAIL_USERNAME" -e EMAIL_PASSWORD="$EMAIL_PASSWORD" -e ADMIN_EMAIL="$ADMIN_EMAIL" dewmink/embula-backend:latest | |
| env: | |
| MYSQL_URL: ${{ secrets.MYSQL_URL }} | |
| USERNAME: ${{ secrets.USERNAME }} | |
| PASSWORD: ${{ secrets.PASSWORD }} | |
| JWT_SECRET: ${{ secrets.JWT_SECRET }} | |
| TOKEN_VALIDITY: ${{ secrets.TOKEN_VALIDITY }} | |
| REFRESH_TOKEN_VALIDITY: ${{ secrets.REFRESH_TOKEN_VALIDITY }} | |
| STRIPE_SECRET: ${{ secrets.STRIPE_SECRET }} | |
| EMAIL_USERNAME: ${{ secrets.EMAIL_USERNAME }} | |
| EMAIL_PASSWORD: ${{ secrets.EMAIL_PASSWORD }} | |
| ADMIN_EMAIL: ${{ secrets.ADMIN_EMAIL }} |