added some deployment changes (#197)

Author: amthorn

.github/workflows/ci.yml

@@ -63,9 +63,11 @@ jobs:
         with:
           path: "**/node_modules"
           key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/package.json') }}
-      - run: echo `openssl rand -hex 64` >> mongoPassword
-      - run: echo "DOESNTMATTER" >> token
-      - run: sudo docker run -v $(pwd)/mongoPassword:/run/secrets/mongoPassword -e MONGO_INITDB_ROOT_USERNAME=root -e MONGO_INITDB_DATABASE=qutex -e MONGO_INITDB_ROOT_PASSWORD_FILE=/run/secrets/mongoPassword --name mongo -d -p 27017:27017 mongo:4.4.5
+      - run: |
+          mkdir -p secrets/local/
+          echo `openssl rand -hex 64` >> secrets/local/mongoPassword
+          echo "DOESNTMATTER" >> secrets/local/token
+          sudo docker run -v $(pwd)/secrets/local/mongoPassword:/run/secrets/mongoPassword -e MONGO_INITDB_ROOT_USERNAME=root -e MONGO_INITDB_DATABASE=qutex -e MONGO_INITDB_ROOT_PASSWORD_FILE=/run/secrets/mongoPassword --name mongo -d -p 27017:27017 mongo:4.4.5
       - env:
           QUTEX_TESTING: true
         run: yarn --cwd services/bot test --verbose

.gitignore

@@ -6,9 +6,8 @@ secrets.env
 result.json
 coverage/
 .DS_Store
-token
-mongoPassword
 site/
+secrets
 
 # Jekyll
 docs/_site

Makefile

@@ -9,7 +9,6 @@ up:
 
 .PHONY: deploy $(VERSION)
 deploy:
-	${MAKE} build
 	./bin/deploy_stack.sh $(VERSION)
 
 .PHONY: logs

docker-compose.dev.yml

@@ -16,4 +16,9 @@ services:
             context: ./services/bot
     mongo:
         ports:
-            - 27017:27017
+            - 27017:27017
+secrets:
+    token:
+        file: secrets/local/token
+    mongoPassword:
+        file: secrets/local/mongoPassword

docker-compose.yml

@@ -54,8 +54,8 @@ services:
             - mongoPassword
 secrets:
     token:
-        file: token
+        file: secrets/prod/token
     mongoPassword:
-        file: mongoPassword
+        file: secrets/prod/mongoPassword
 volumes:
     mongo_volume:

services/bot/migrate-mongo-config.js

@@ -3,7 +3,7 @@ const GET = (secret) => {
     if (['production', 'development'].includes(process.env.NODE_ENV || '')) {
         return FS.readFileSync(`/run/secrets/${secret}`, 'utf8').trim();
     } else {
-        return FS.readFileSync(`../../${secret}`, 'utf8').trim();
+        return FS.readFileSync(`../../secrets/local/${secret}`, 'utf8').trim();
     }
 };
 

services/bot/src/secrets.ts

@@ -14,6 +14,6 @@ export const GET = (secret: string): string => {
     if (['production', 'development'].includes(process.env.NODE_ENV || '')) {
         return fs.readFileSync(`/run/secrets/${secret}`, 'utf8').trim();
     } else {
-        return fs.readFileSync(`../../${secret}`, 'utf8').trim();
+        return fs.readFileSync(`../../secrets/local/${secret}`, 'utf8').trim();
     }
 };

services/bot/tests/production.test.ts

@@ -9,7 +9,7 @@ import mock from 'mock-fs';
 mock({
     '/run/secrets/': {
         'token': 'some token',
-        'mongoPassword': mock.load('../../mongoPassword')
+        'mongoPassword': mock.load('../../secrets/local/mongoPassword')
     },
     'src': mock.load('src'),
     'tests': mock.load('tests'),