feat(cicd): add reworked deployment action

Author: ibiixie

.github/workflows/deploy.yml

@@ -2,9 +2,7 @@ name: CI
 
 on:
   push:
-    branches: ["main"]
-  pull_request:
-    branches: ["main"]
+    branches: ["main", "rewrite"]
 
   workflow_dispatch:
 
@@ -33,3 +31,7 @@ jobs:
         uses: hoverkraft-tech/compose-action@v2
         with:
           compose-file: ./compose.yaml
+        env:
+          GITHUB_TOKEN: ${{ secrets.GRAPHQL_GITHUB_API_TOKEN }}
+          CF_TURNSTILE_SECRET: ${{ secrets.CF_TURNSTILE_SECRET }}
+          REDACTED_TERMS: ${{ secrets.REDACTED_TERMS }}

compose.dev.yaml

@@ -1,5 +1,3 @@
-# Development environment overrides
-
 services:
   biixie_frontend:
     restart: no
@@ -9,3 +7,10 @@ services:
       DEBUG: true
       BACKEND_LOG_LEVEL: "Trace"
       ALLOW_DEBUG_MAILING: false
+    volumes:
+      - ./backend/redacted/redacted_terms.kvp:/usr/share/redacted_terms.kvp
+secrets:
+  cf_turnstile_secret:
+    file: ./backend/secrets/cf_turnstile_secret
+  redacted_terms:
+    file: ./backend/redacted/redacted_terms.kvp

compose.prod.yaml

@@ -0,0 +1,5 @@
+secrets:
+  cf_turnstile_secret:
+    environment: CF_TURNSTILE_SECRET
+  redacted_terms:
+    environment: KVP_REDACTED_TERMS

compose.yaml

@@ -16,16 +16,11 @@ services:
     ports:
       - "3000:3000"
     restart: always
-    volumes:
-      - ./backend/redacted/redacted_terms.kvp:/usr/share/redacted_terms.kvp
     networks:
       - proxy_net
     secrets:
       - cf_turnstile_secret
-
-secrets:
-  cf_turnstile_secret:
-    file: backend/secrets/cf_turnstile_secret
+      - redacted_terms
 
 networks:
   proxy_net: