89 lines
2.7 KiB
YAML
89 lines
2.7 KiB
YAML
name: Build And Release Templates
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install Podman
|
|
run: |
|
|
sudo apt-get update
|
|
sudo apt-get install -y podman
|
|
|
|
- name: Build production image
|
|
run: podman build --target runtime -t ci-cd-email-templates:${{ github.sha }} .
|
|
|
|
- name: Render HTML templates
|
|
run: |
|
|
mkdir -p build/html
|
|
podman run --rm \
|
|
-e OUTPUT_DIR=/workspace/build/html \
|
|
-v "${GITHUB_WORKSPACE}/build/html:/workspace/build/html" \
|
|
ci-cd-email-templates:${{ github.sha }}
|
|
|
|
- name: Upload rendered templates artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: rendered-email-templates
|
|
path: build/html/*.html
|
|
if-no-files-found: error
|
|
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
needs: build
|
|
environment: Production
|
|
permissions:
|
|
contents: read
|
|
steps:
|
|
- name: Download rendered templates
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: rendered-email-templates
|
|
path: release/html
|
|
|
|
- name: Validate Cloudflare R2 configuration
|
|
env:
|
|
CF_R2_ACCESS_KEY_ID: ${{ secrets.CF_R2_ACCESS_KEY_ID }}
|
|
CF_R2_SECRET_ACCESS_KEY: ${{ secrets.CF_R2_SECRET_ACCESS_KEY }}
|
|
CF_R2_ACCOUNT_ID: ${{ secrets.CF_R2_ACCOUNT_ID }}
|
|
CF_R2_BUCKET: ${{ secrets.CF_R2_BUCKET }}
|
|
run: |
|
|
missing=()
|
|
for name in CF_R2_ACCESS_KEY_ID CF_R2_SECRET_ACCESS_KEY CF_R2_ACCOUNT_ID CF_R2_BUCKET; do
|
|
if [ -z "${!name}" ]; then
|
|
missing+=("$name")
|
|
fi
|
|
done
|
|
|
|
if [ "${#missing[@]}" -gt 0 ]; then
|
|
printf 'Missing required GitHub Actions secrets for the Production environment: %s\n' "${missing[*]}" >&2
|
|
exit 1
|
|
fi
|
|
|
|
- name: Upload templates to Cloudflare R2
|
|
env:
|
|
AWS_ACCESS_KEY_ID: ${{ secrets.CF_R2_ACCESS_KEY_ID }}
|
|
AWS_SECRET_ACCESS_KEY: ${{ secrets.CF_R2_SECRET_ACCESS_KEY }}
|
|
AWS_DEFAULT_REGION: auto
|
|
AWS_EC2_METADATA_DISABLED: true
|
|
CF_R2_ACCOUNT_ID: ${{ secrets.CF_R2_ACCOUNT_ID }}
|
|
CF_R2_BUCKET: ${{ secrets.CF_R2_BUCKET }}
|
|
CF_R2_PREFIX: ${{ vars.CF_R2_PREFIX }}
|
|
run: |
|
|
ENDPOINT="https://${CF_R2_ACCOUNT_ID}.r2.cloudflarestorage.com"
|
|
TARGET="s3://${CF_R2_BUCKET}"
|
|
if [ -n "${CF_R2_PREFIX}" ]; then
|
|
TARGET="${TARGET}/${CF_R2_PREFIX}"
|
|
fi
|
|
aws s3 sync release/html "${TARGET}" --endpoint-url "${ENDPOINT}" --delete
|