build : Add Decrypt & Unzip application.tar

sync-without-async · Nov 17, 2023 · 6edb8df · 6edb8df
1 parent c5b1b27
commit 6edb8df
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -8,6 +8,10 @@ on:
     branches:
       - main
 
+env:
+  RESOURCE_PATH: /home/runner/work/Rehab-Backend/Rehab-Backend/src/main/resources
+  PROJECT_NAME : rehab-server
+
 permissions:
   contents: read
   checks: write
@@ -29,6 +33,16 @@ jobs:
       - name: Make gradlew executable
         run: chmod +x ./gradlew
 
+      - name: Decrypt application-secret yml
+        run: gpg --quiet --batch --yes --always-trust --decrypt --passphrase=${{ secrets.APPLICATION_SECRET_YML }} --output $RESOURCE_PATH/application.tar $RESOURCE_PATH/application.tar.gpg
+        shell: bash
+
+      - name: Unzip application.tar file to application-secret.yml
+        run: |
+          cd $RESOURCE_PATH 
+          tar xvf application.tar
+        shell: bash
+
       - name: Build with Gradle
         run: ./gradlew build -x test
 

diff --git a/src/main/resources/application.tar.gpg b/src/main/resources/application.tar.gpg