deploy.yml

name: Deploy to GitHub Pages

on:
  push:
    branches: ["main"]

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
permissions:
  contents: read
  pages: write
  id-token: write

# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
concurrency:
  group: "pages"
  cancel-in-progress: false

jobs:
  build:
    name: Build
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v7
      
      - name: Install pnpm
        uses: pnpm/action-setup@v3
        with:
          version: 9
          
      - name: Set up Node.js
        uses: actions/setup-node@v7
        with:
          node-version: 20
          cache: 'pnpm'
          
      - name: Install dependencies
        run: pnpm install --frozen-lockfile
        
      - name: Setup Pages
        uses: actions/configure-pages@v6
        
      - name: Validate required secrets
        env:
          GITHUB_CLIENT_ID: ${{ secrets.NEXT_PUBLIC_GITHUB_CLIENT_ID }}
          OAUTH_PROXY_URL: ${{ secrets.NEXT_PUBLIC_GITHUB_OAUTH_PROXY_URL }}
        run: |
          missing=()
          [[ -z "$GITHUB_CLIENT_ID" ]] && missing+=("NEXT_PUBLIC_GITHUB_CLIENT_ID")
          [[ -z "$OAUTH_PROXY_URL" ]] && missing+=("NEXT_PUBLIC_GITHUB_OAUTH_PROXY_URL")
          if [[ ${#missing[@]} -gt 0 ]]; then
            echo "Error: the following required secrets are missing or empty:"
            for s in "${missing[@]}"; do echo "  - $s"; done
            exit 1
          fi

      - name: Build Next.js app
        # This builds all packages, including the Next.js app
        run: pnpm turbo build
        env:
          NEXT_PUBLIC_GITHUB_CLIENT_ID: ${{ secrets.NEXT_PUBLIC_GITHUB_CLIENT_ID }}
          NEXT_PUBLIC_GITHUB_OAUTH_PROXY_URL: ${{ secrets.NEXT_PUBLIC_GITHUB_OAUTH_PROXY_URL }}
        
      - name: Upload artifact
        uses: actions/upload-pages-artifact@v5
        with:
          path: ./apps/web/out

  deploy:
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}
    runs-on: ubuntu-latest
    needs: build
    steps:
      - name: Deploy to GitHub Pages
        id: deployment
        uses: actions/deploy-pages@v5