jcoakley/dev1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pipline build v50. Injecting JWT_SECRET

Browse Source
This commit is contained in:
Josh 2025-07-31 17:26:56 +00:00
parent e0cd2ff1eb
commit c49eed87d4
1 changed files with 5 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
.woodpecker.yml
View File

@ -34,23 +34,20 @@ steps:
'set -euo pipefail; \ 'set -euo pipefail; \
IMG_TAG=$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev); \ IMG_TAG=$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev); \
export IMG_TAG; \ export IMG_TAG; \
STRIPE_PUBLISHABLE_KEY=$(gcloud secrets versions access latest --secret=STRIPE_PUBLISHABLE_KEY --project=aptivaai-dev); \ JWT_SECRET=$(gcloud secrets versions access latest --secret=JWT_SECRET --project=aptivaai-dev); \
export STRIPE_PUBLISHABLE_KEY; \ export JWT_SECRET; \
echo "📦 IMG_TAG=$IMG_TAG"; \ echo "📦 IMG_TAG=$IMG_TAG"; \
echo "💳 STRIPE_PUBLISHABLE_KEY length = $(echo -n \"$STRIPE_PUBLISHABLE_KEY\" | wc -c)"; \ echo "🔐 JWT_SECRET length = $(echo -n \"$JWT_SECRET\" | wc -c)"; \
cd /home/jcoakley/aptiva-staging-app; \ cd /home/jcoakley/aptiva-staging-app; \
echo "IMG_TAG = $IMG_TAG"; \ echo "IMG_TAG = $IMG_TAG"; \
sudo --preserve-env=IMG_TAG,STRIPE_PUBLISHABLE_KEY docker compose pull; \ sudo --preserve-env=IMG_TAG,JWT_SECRET docker compose pull; \
sudo --preserve-env=IMG_TAG,STRIPE_PUBLISHABLE_KEY docker compose up -d --force-recreate --remove-orphans; \ sudo --preserve-env=IMG_TAG,JWT_SECRET docker compose up -d --force-recreate --remove-orphans; \
echo "✅ Staging stack refreshed with tag $IMG_TAG"' echo "✅ Staging stack refreshed with tag $IMG_TAG"'
secrets: secrets:
- STAGING_SSH_KEY - STAGING_SSH_KEY
- STAGING_KNOWN_HOSTS - STAGING_KNOWN_HOSTS
environment:
CI_COMMIT_SHA: ${CI_COMMIT_SHA}
when: when:
event: event:
- push - push