Lock file maintenance (#670) #596
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy With CDK | |
| on: | |
| workflow_dispatch: | |
| push: | |
| branches: | |
| - main | |
| permissions: | |
| contents: read | |
| id-token: write | |
| concurrency: | |
| group: deploy | |
| cancel-in-progress: false | |
| jobs: | |
| run-cdk-deploy: | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| shell: devenv shell bash -- -e {0} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v6 | |
| - name: Install Nix | |
| uses: cachix/install-nix-action@v31 | |
| - name: Set up devenv cache | |
| uses: cachix/cachix-action@v16 | |
| with: | |
| name: devenv | |
| - name: Install devenv | |
| shell: bash | |
| run: nix profile add nixpkgs#devenv | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v6 | |
| with: | |
| role-to-assume: ${{ secrets.ASSUME_ROLE }} | |
| aws-region: us-west-2 | |
| role-duration-seconds: 900 | |
| - name: Add arm target | |
| run: rustup target add aarch64-unknown-linux-gnu | |
| - name: Install deps | |
| run: cd cdk && pnpm install | |
| - name: CDK deploy | |
| env: | |
| DOMAIN_NAME: ${{ secrets.DOMAIN_NAME }} | |
| EMAIL: ${{ secrets.EMAIL }} | |
| run: cd cdk && pnpm run deploy |