strapi/.github/workflows/deploy.yml

name: Deploy app to donate.magicgrants.org

on:
  push:
    branches:
      - main

jobs:
  deploy:
    runs-on: ubuntu-latest
    environment: main

    steps:
      - uses: actions/checkout@v4
      - uses: webfactory/ssh-agent@v0.9.0
        with:
          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
      - name: Deploy
        run: |
          ssh -o StrictHostKeyChecking=no ${{ secrets.VPS_USER }}@${{ secrets.VPS_IP }} << 'EOF'
            export HISTFILE=/dev/null
            cd strapi
            echo "Pulling changes..."
            git pull
            echo "Building and starting..."

            APP_KEYS=${{ secrets.APP_KEYS }} \
            API_TOKEN_SALT=${{ secrets.API_TOKEN_SALT }} \
            JWT_SECRET=${{ secrets.JWT_SECRET }} \
            ADMIN_JWT_SECRET=${{ secrets.ADMIN_JWT_SECRET }} \
            TRANSFER_TOKEN_SALT=${{ secrets.TRANSFER_TOKEN_SALT }} \
            DATABASE_PASSWORD=${{ secrets.DATABASE_PASSWORD }} \
            HETZNER_BUCKET_ACCESS_KEY_ID=${{ secrets.HETZNER_BUCKET_ACCESS_KEY_ID }} \
            HETZNER_BUCKET_ACCESS_SECRET=${{ secrets.HETZNER_BUCKET_ACCESS_SECRET }} \
            HETZNER_BUCKET_REGION=${{ secrets.HETZNER_BUCKET_REGION }} \
            HETZNER_BUCKET_NAME=${{ secrets.HETZNER_BUCKET_NAME }} \
            HETZNER_BUCKET_ENDPOINT=${{ secrets.HETZNER_BUCKET_ENDPOINT }} \
            HETZNER_BUCKET_HOST=${{ secrets.HETZNER_BUCKET_HOST }} \
            CLOUDFLARE_TUNNEL_TOKEN=${{ secrets.CLOUDFLARE_TUNNEL_TOKEN }} \
            docker compose -f docker-compose.prod.yml up -d --build
          EOF