feat: env var refactor - next public #21
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and deploy container app to Azure Web App | |
| on: | |
| push: | |
| branches: | |
| - main | |
| workflow_dispatch: | |
| # Variables and secrets will need to be set in the repository settings. | |
| env: | |
| # Static variables | |
| NODE_VERSION: '20' | |
| NX_APP_NAME: 'msal-react-demo' | |
| # Dynamic variables | |
| AZURE_APPSERVICE_APP_NAME: ${{ vars.AZURE_APPSERVICE_APP_NAME }} | |
| AZURE_APPSERVICE_SLOT_NAME: ${{ vars.AZURE_APPSERVICE_SLOT_NAME }} | |
| NEXT_PUBLIC_AZURE_B2C_AUTHORITY: ${{ vars.NEXT_PUBLIC_AZURE_B2C_AUTHORITY }} | |
| NEXT_PUBLIC_AZURE_B2C_FLOW_EDIT_PROFILE: ${{ vars.NEXT_PUBLIC_AZURE_B2C_FLOW_EDIT_PROFILE }} | |
| NEXT_PUBLIC_AZURE_B2C_FLOW_FORGOT_PASSWORD: ${{ vars.NEXT_PUBLIC_AZURE_B2C_FLOW_FORGOT_PASSWORD }} | |
| NEXT_PUBLIC_AZURE_B2C_FLOW_SIGN_UP_SIGN_IN: ${{ vars.NEXT_PUBLIC_AZURE_B2C_FLOW_SIGN_UP_SIGN_IN }} | |
| # Secrets - values won't be shown in the logs | |
| AZURE_APPSERVICE_PUBLISHPROFILE: ${{ secrets.AZURE_APPSERVICE_PUBLISHPROFILE }} | |
| NEXT_PUBLIC_AZURE_B2C_CLIENT_ID: ${{ secrets.NEXT_PUBLIC_AZURE_B2C_CLIENT_ID }} | |
| NEXT_PUBLIC_AZURE_B2C_REDIRECT_URI: ${{ secrets.NEXT_PUBLIC_AZURE_B2C_REDIRECT_URI }} | |
| NEXT_PUBLIC_AZURE_B2C_TENANT_ID: ${{ secrets.NEXT_PUBLIC_AZURE_B2C_TENANT_ID }} | |
| DOCKERHUB_REPO: ${{ secrets.DOCKERHUB_REPO }} | |
| DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }} | |
| DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }} | |
| jobs: | |
| check_commit: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| should_skip: ${{ steps.skip_check.outputs.should_skip }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Determine if build should be skipped | |
| id: skip_check | |
| run: | | |
| echo "Checking if the commit should skip the build and deploy process..." | |
| if echo "${{ github.event.head_commit.message }}" | grep -E '^(docs|chore):'; then | |
| echo "##[set-output name=should_skip;]true" | |
| else | |
| echo "##[set-output name=should_skip;]false" | |
| fi | |
| build: | |
| runs-on: 'ubuntu-latest' | |
| needs: check_commit | |
| if: needs.check_commit.outputs.should_skip == 'false' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-node@v4 | |
| with: | |
| node-version: ${{ env.NODE_VERSION }} | |
| cache: 'npm' | |
| - name: Install dependencies | |
| run: npm ci | |
| - name: Build Nx Next.js app | |
| run: npx nx build ${{ env.NX_APP_NAME }} | |
| - name: Show directory structure | |
| run: tree -a -L 3 -d ./apps ./libs | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v2 | |
| - name: Log in to registry | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ env.DOCKERHUB_USERNAME }} | |
| password: ${{ env.DOCKERHUB_TOKEN }} | |
| - name: Build and push container image to registry | |
| uses: docker/build-push-action@v5 | |
| with: | |
| push: true | |
| tags: index.docker.io/${{ env.DOCKERHUB_USERNAME }}/${{ env.DOCKERHUB_REPO}}:${{ github.sha }} | |
| context: . | |
| build-args: | | |
| NEXT_PUBLIC_AZURE_B2C_AUTHORITY: ${{ env.NEXT_PUBLIC_AZURE_B2C_AUTHORITY }} | |
| NEXT_PUBLIC_AZURE_B2C_CLIENT_ID: ${{ env.NEXT_PUBLIC_AZURE_B2C_CLIENT_ID }} | |
| NEXT_PUBLIC_AZURE_B2C_FLOW_EDIT_PROFILE: ${{ env.NEXT_PUBLIC_AZURE_B2C_FLOW_EDIT_PROFILE }} | |
| NEXT_PUBLIC_AZURE_B2C_FLOW_FORGOT_PASSWORD: ${{ env.NEXT_PUBLIC_AZURE_B2C_FLOW_FORGOT_PASSWORD }} | |
| NEXT_PUBLIC_AZURE_B2C_FLOW_SIGN_UP_SIGN_IN: ${{ env.NEXT_PUBLIC_AZURE_B2C_FLOW_SIGN_UP_SIGN_IN }} | |
| NEXT_PUBLIC_AZURE_B2C_REDIRECT_URI: ${{ env.NEXT_PUBLIC_AZURE_B2C_REDIRECT_URI }} | |
| NEXT_PUBLIC_AZURE_B2C_TENANT_ID: ${{ env.NEXT_PUBLIC_AZURE_B2C_TENANT_ID }} | |
| NODE_VERSION: ${{ env.NODE_VERSION }} | |
| deploy: | |
| runs-on: ubuntu-latest | |
| needs: build | |
| if: needs.check_commit.outputs.should_skip == 'false' | |
| environment: | |
| name: production | |
| url: ${{ steps.deploy-to-webapp.outputs.webapp-url }} | |
| steps: | |
| - name: Deploy to Azure Web App | |
| id: deploy-to-webapp | |
| uses: azure/webapps-deploy@v2 | |
| with: | |
| app-name: ${{ env.AZURE_APPSERVICE_APP_NAME }} | |
| slot-name: ${{ env.AZURE_APPSERVICE_SLOT_NAME }} | |
| publish-profile: ${{ env.AZURE_APPSERVICE_PUBLISHPROFILE }} | |
| images: 'index.docker.io/${{ env.DOCKER_IMAGE_NAME }}:${{ github.sha }}' |