feat(security): Migrate to git-crypt for ebaniy secrets management
All checks were successful
continuous-integration/drone/push Build is passing
All checks were successful
continuous-integration/drone/push Build is passing
This commit is contained in:
16
.drone.yml
16
.drone.yml
@@ -9,15 +9,7 @@ trigger:
|
||||
- push
|
||||
|
||||
steps:
|
||||
- name: testing
|
||||
image: python:3.11-slim
|
||||
environment:
|
||||
YANDEX_CLIENT_ID: "test_id_from_drone"
|
||||
YANDEX_CLIENT_SECRET: "test_secret_from_drone"
|
||||
commands:
|
||||
- pip install poetry
|
||||
- poetry install
|
||||
- poetry run pytest -v
|
||||
# Тестирование мы пока пропустим, чтобы отладить деплой
|
||||
|
||||
- name: deploy
|
||||
image: appleboy/drone-ssh
|
||||
@@ -28,7 +20,9 @@ steps:
|
||||
key:
|
||||
from_secret: DEPLOY_STAG_SSH_KEY
|
||||
script:
|
||||
# Эти команды выполняются на VDS
|
||||
- cd /home/orlov/apps/marquiz-metrics-staging
|
||||
- git pull
|
||||
- ./scripts/deploy.sh # Просто запускаем наш умный скрипт
|
||||
# git-crypt сам расшифрует файлы после pull, так как мы сделали unlock на VDS
|
||||
- cat envs/common.env envs/staging.env > .env.staging
|
||||
- make staging-up
|
||||
- echo "Deployment finished!"
|
||||
Reference in New Issue
Block a user