chore: avoid ignoring .kamal/secrets*

cedarcode · Oct 18, 2024 · 9f8f508 · 9f8f508
1 parent 2af61b0
commit 9f8f508
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 10 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -61,13 +61,9 @@ jobs:
       - name: Expose GitHub Runtime for cache
         uses: crazy-max/ghaction-github-runtime@v3
 
-      - name: Generate kamal secrets
-        run: |
-          cat <<EOT >> .kamal/secrets.${{ inputs.destination }}
-            RAILS_MASTER_KEY=${{secrets.RAILS_MASTER_KEY}}
-            DATABASE_URL=${{secrets.DATABASE_URL}}
-            SECRET_KEY_BASE=${{secrets.SECRET_KEY_BASE}}
-          EOT
-
       - name: Run deploy command
         run: bundle exec kamal deploy -d ${{ inputs.destination }}
+        env:
+          RAILS_MASTER_KEY: ${{secrets.RAILS_MASTER_KEY}}
+          DATABASE_URL: ${{secrets.DATABASE_URL}}
+          SECRET_KEY_BASE: ${{secrets.SECRET_KEY_BASE}}
diff --git a/.gitignore b/.gitignore
@@ -11,8 +11,6 @@
 /.env*
 !/.env*.erb
 
-/.kamal/secrets*
-
 # Ignore all logfiles and tempfiles.
 /log/*
 /tmp/*

diff --git a/.kamal/secrets-common b/.kamal/secrets-common
@@ -0,0 +1,3 @@
+RAILS_MASTER_KEY=$RAILS_MASTER_KEY
+DATABASE_URL=$DATABASE_URL
+SECRET_KEY_BASE=$SECRET_KEY_BASE