mirror of
https://github.com/Sea-Haven-Industries/seahaven-site.git
synced 2026-09-30 15:53:17 +00:00
84eeee84da
Some checks are pending
Deploy / deploy (push) Waiting to run
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
77 lines
2.7 KiB
YAML
77 lines
2.7 KiB
YAML
name: Deploy
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
permissions:
|
|
id-token: write # Required for OIDC
|
|
contents: read # Allows checkout of repo
|
|
|
|
# Never cancel a deploy mid-flight: cancelling between the S3 sync and the
|
|
# CloudFront invalidation (or mid `--delete`) would leave the bucket in a
|
|
# half-updated state. Queue instead.
|
|
concurrency:
|
|
group: deploy-${{ github.ref }}
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v7.0.1
|
|
|
|
- name: Set up Node
|
|
uses: actions/setup-node@v7
|
|
with:
|
|
node-version: "24"
|
|
cache: npm
|
|
|
|
- name: Build site
|
|
run: |
|
|
npm ci --ignore-scripts
|
|
npm run build
|
|
# Fail closed: never let a silently-empty build reach the --delete sync.
|
|
test -f _site/index.html
|
|
test -f _site/contact/index.html
|
|
test -f _site/404.html
|
|
count=$(find _site -type f | wc -l)
|
|
if [ "$count" -lt 40 ]; then
|
|
echo "::error::build produced only $count files (expected >= 40); aborting deploy"
|
|
exit 1
|
|
fi
|
|
echo "Build OK: $count files."
|
|
|
|
- name: Configure AWS credentials using OIDC
|
|
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
|
|
with:
|
|
role-to-assume: arn:aws:iam::011934824531:role/tf-managed/githubdeploy-seahaven-site
|
|
aws-region: us-east-1
|
|
|
|
- name: Sync build output to S3
|
|
run: |
|
|
# 1) Static assets — 1-day browser cache (no filename fingerprinting yet,
|
|
# so do NOT go immutable). CloudFront /* invalidation below keeps the
|
|
# edge fresh; this only affects returning visitors' browser cache.
|
|
aws s3 sync _site/ s3://seahaven-site-prod --no-progress \
|
|
--exclude "*.html" --exclude "*.xml" --exclude "*.txt" \
|
|
--cache-control "public, max-age=86400"
|
|
|
|
# 2) HTML / sitemap / robots — always revalidate so a deploy is seen immediately.
|
|
aws s3 sync _site/ s3://seahaven-site-prod --no-progress \
|
|
--exclude "*" --include "*.html" --include "*.xml" --include "*.txt" \
|
|
--cache-control "no-cache"
|
|
|
|
# 3) Prune files removed from the build. This pass sets no metadata, so
|
|
# it skips already-uploaded objects (preserving the Cache-Control set
|
|
# above) and only deletes objects no longer present in _site/.
|
|
aws s3 sync _site/ s3://seahaven-site-prod --no-progress --delete
|
|
|
|
- name: Invalidate CloudFront cache
|
|
run: |
|
|
aws cloudfront create-invalidation \
|
|
--distribution-id E35OCA79OAJ03H \
|
|
--paths "/*"
|