jcoakley/dev1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pipline build v50. Injecting JWT_SECRET
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Details

Browse Source
This commit is contained in:
Josh 2025-07-31 17:26:56 +00:00
parent bfd8eb234c
commit b284b18df8
1 changed files with 5 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
.woodpecker.yml
View File

@ -34,23 +34,20 @@ steps:
'set -euo pipefail; \
IMG_TAG=$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev); \
export IMG_TAG; \
STRIPE_PUBLISHABLE_KEY=$(gcloud secrets versions access latest --secret=STRIPE_PUBLISHABLE_KEY --project=aptivaai-dev); \
export STRIPE_PUBLISHABLE_KEY; \
JWT_SECRET=$(gcloud secrets versions access latest --secret=JWT_SECRET --project=aptivaai-dev); \
export JWT_SECRET; \
echo "📦 IMG_TAG=$IMG_TAG"; \
echo "💳 STRIPE_PUBLISHABLE_KEY length = $(echo -n \"$STRIPE_PUBLISHABLE_KEY\" | wc -c)"; \
echo "🔐 JWT_SECRET length = $(echo -n \"$JWT_SECRET\" | wc -c)"; \
cd /home/jcoakley/aptiva-staging-app; \
echo "IMG_TAG = $IMG_TAG"; \
sudo --preserve-env=IMG_TAG,STRIPE_PUBLISHABLE_KEY docker compose pull; \
sudo --preserve-env=IMG_TAG,STRIPE_PUBLISHABLE_KEY docker compose up -d --force-recreate --remove-orphans; \
sudo --preserve-env=IMG_TAG,JWT_SECRET docker compose pull; \
sudo --preserve-env=IMG_TAG,JWT_SECRET docker compose up -d --force-recreate --remove-orphans; \
echo "✅ Staging stack refreshed with tag $IMG_TAG"'
secrets:
- STAGING_SSH_KEY
- STAGING_KNOWN_HOSTS
environment:
CI_COMMIT_SHA: ${CI_COMMIT_SHA}
when:
event:
- push