main-core.yaml

name: Core

on:
  push:
    branches:
      - main

defaults:
  run:
    working-directory: platform/core

jobs:
  deploy:
    runs-on: ubuntu-latest
    environment: dev
    steps:
      - uses: actions/checkout@v3

      - uses: cachix/install-nix-action@v18
        with:
          nix_path: nixpkgs=channel:nixos-unstable

      - run: nix-build ../platform.nix

      - name: Cache Dependencies
        id: cache-modules
        uses: actions/cache@v3
        with:
          path: |
            node_modules
            .yarn
          key: ${{ runner.os }}-node_modules-${{ hashFiles('yarn.lock') }}

      - name: Install Dependencies
        run: yarn install

      - name: Test
        run: yarn run test

      - name: Deploy edges D1 Database
        uses: cloudflare/wrangler-action@2.0.0
        with:
          wranglerVersion: '3.19.0'
          apiToken: ${{ secrets.TOKEN_CLOUDFLARE_API }}
          accountId: ${{ secrets.INTERNAL_CLOUDFLARE_ACCOUNT_ID }}
          workingDirectory: 'platform/core'
          command: d1 migrations apply edges-v2-dev --config wrangler.dev.toml --env dev
          environment: 'dev'

      - name: Deploy
        uses: cloudflare/wrangler-action@2.0.0
        with:
          wranglerVersion: '3.19.0'
          apiToken: ${{ secrets.TOKEN_CLOUDFLARE_API }}
          accountId: ${{ secrets.INTERNAL_CLOUDFLARE_ACCOUNT_ID }}
          workingDirectory: platform/core
          command: publish --config wrangler.dev.toml --env dev
          environment: 'dev'
          secrets: |
            SECRET_JWK_CURRENT_KID
            SECRET_JWKS

            INTERNAL_DKIM_SELECTOR
            INTERNAL_EMAIL_DISTRIBUTION_KEY
            SECRET_RELAY_DKIM_PRIVATE_KEY

            INTERNAL_GOOGLE_OAUTH_CLIENT_ID
            SECRET_GOOGLE_OAUTH_CLIENT_SECRET

            INTERNAL_GITHUB_OAUTH_CLIENT_ID
            SECRET_GITHUB_OAUTH_CLIENT_SECRET

            INTERNAL_TWITTER_OAUTH_CLIENT_ID
            SECRET_TWITTER_OAUTH_CLIENT_SECRET

            INTERNAL_MICROSOFT_OAUTH_CLIENT_ID
            SECRET_MICROSOFT_OAUTH_CLIENT_SECRET

            INTERNAL_APPLE_OAUTH_CLIENT_ID
            SECRET_APPLE_OAUTH_CLIENT_SECRET

            INTERNAL_DISCORD_OAUTH_CLIENT_ID
            SECRET_DISCORD_OAUTH_CLIENT_SECRET

            INTERNAL_CLOUDFLARE_ZONE_ID
            TOKEN_CLOUDFLARE_API

            SECRET_ZERODEV_PROJECTID
        env:
          NODE_ENV: 'development'

          SECRET_JWK_CURRENT_KID: ${{ secrets.SECRET_JWK_CURRENT_KID_DEV }}
          SECRET_JWKS: ${{ secrets.SECRET_JWKS_DEV }}

          INTERNAL_DKIM_SELECTOR: ${{ secrets.INTERNAL_DKIM_SELECTOR }}

          INTERNAL_EMAIL_DISTRIBUTION_KEY: ${{secrets.INTERNAL_EMAIL_DISTRIBUTION_KEY_DEV}}
          SECRET_RELAY_DKIM_PRIVATE_KEY: ${{ secrets.SECRET_RELAY_DKIM_PRIVATE_KEY }}

          INTERNAL_GOOGLE_OAUTH_CLIENT_ID: ${{ vars.INTERNAL_GOOGLE_OAUTH_CLIENT_ID_DEV }}
          SECRET_GOOGLE_OAUTH_CLIENT_SECRET: ${{ secrets.SECRET_GOOGLE_OAUTH_CLIENT_SECRET_DEV }}

          INTERNAL_GITHUB_OAUTH_CLIENT_ID: ${{ vars.INTERNAL_GITHUB_OAUTH_CLIENT_ID_DEV }}
          SECRET_GITHUB_OAUTH_CLIENT_SECRET: ${{ secrets.SECRET_GITHUB_OAUTH_CLIENT_SECRET_DEV }}

          INTERNAL_TWITTER_OAUTH_CLIENT_ID: ${{ vars.INTERNAL_TWITTER_OAUTH_CLIENT_ID_DEV }}
          SECRET_TWITTER_OAUTH_CLIENT_SECRET: ${{ secrets.SECRET_TWITTER_OAUTH_CLIENT_SECRET_DEV }}

          INTERNAL_MICROSOFT_OAUTH_CLIENT_ID: ${{ vars.INTERNAL_MICROSOFT_OAUTH_CLIENT_ID_DEV }}
          SECRET_MICROSOFT_OAUTH_CLIENT_SECRET: ${{ secrets.SECRET_MICROSOFT_OAUTH_CLIENT_SECRET_DEV }}

          INTERNAL_APPLE_OAUTH_CLIENT_ID: ${{ vars.INTERNAL_APPLE_OAUTH_CLIENT_ID_DEV }}
          SECRET_APPLE_OAUTH_CLIENT_SECRET: ${{ secrets.SECRET_APPLE_OAUTH_CLIENT_SECRET_DEV }}

          INTERNAL_DISCORD_OAUTH_CLIENT_ID: ${{ vars.INTERNAL_DISCORD_OAUTH_CLIENT_ID_DEV }}
          SECRET_DISCORD_OAUTH_CLIENT_SECRET: ${{ secrets.SECRET_DISCORD_OAUTH_CLIENT_SECRET_DEV }}

          INTERNAL_CLOUDFLARE_ZONE_ID: ${{ secrets.INTERNAL_CLOUDFLARE_ZONE_ID }}
          TOKEN_CLOUDFLARE_API: ${{ secrets.TOKEN_CLOUDFLARE_API }}

          SECRET_ZERODEV_PROJECTID: ${{secrets.SECRET_ZERODEV_PROJECTID_DEV }}