feat: update to use doppler secrets and drop .env file

.env.example

@@ -1,20 +0,0 @@
-# Appwrite
-VITE_APPWRITE_ENDPOINT=https://cloud.appwrite.io/v1
-VITE_APPWRITE_PROJECT_ID=your-project-id
-VITE_APPWRITE_DATABASE_ID=your-database-id
-VITE_APPWRITE_MEDICATIONS_COLLECTION_ID=medications
-VITE_APPWRITE_LOGS_COLLECTION_ID=logs
-VITE_APPWRITE_PROFILES_COLLECTION_ID=profiles
-VITE_APPWRITE_COPY_FUNCTION_ID=your-copy-function-id
-VITE_APPWRITE_FCM_PROVIDER_ID=your-fcm-provider-id   # from Appwrite Messaging > Providers
-VITE_APPWRITE_CACHE_COLLECTION_ID=cache
-
-
-# Firebase (for push notifications)
-VITE_FIREBASE_API_KEY=
-VITE_FIREBASE_AUTH_DOMAIN=
-VITE_FIREBASE_PROJECT_ID=
-VITE_FIREBASE_STORAGE_BUCKET=
-VITE_FIREBASE_MESSAGING_SENDER_ID=
-VITE_FIREBASE_APP_ID=
-VITE_FIREBASE_VAPID_KEY=   # Firebase Console > Project Settings > Cloud Messaging > Web Push certificates

.github/workflows/deploy.yml

@@ -1,4 +1,4 @@
-name: Deploy to GitHub Pages
+name: Build & Deploy to Pages
 
 on:
   push:
@@ -14,48 +14,51 @@ concurrency:
   group: pages
   cancel-in-progress: true
 
+env:
+  APP_FOLDER: "medminder"
+
 jobs:
   deploy:
-    runs-on: ubuntu-latest
-    environment:
-      name: github-pages
-      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: easynode-debian
     steps:
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 20
-          cache: npm
+      - name: Setup Doppler CLI
+        uses: dopplerhq/cli-action@v4
 
-      - run: npm ci
+      - name: Cache npm dependencies
+        uses: actions/cache@v3
+        with:
+          path: ~/.npm
+          key: ${{ runner.os }}-npm-${{ hashFiles('**/package-lock.json') }}
+          restore-keys: |
+            ${{ runner.os }}-npm-
+
+      - name: Install dependencies
+        run: npm ci
 
       - name: Build
-        run: npm run build
+        run: doppler run --config prd_secrets -- npm run build
         env:
-          BASE_URL: /medminder/
-          VITE_APPWRITE_ENDPOINT: ${{ secrets.VITE_APPWRITE_ENDPOINT }}
-          VITE_APPWRITE_PROJECT_ID: ${{ secrets.VITE_APPWRITE_PROJECT_ID }}
-          VITE_APPWRITE_DATABASE_ID: ${{ secrets.VITE_APPWRITE_DATABASE_ID }}
-          VITE_APPWRITE_MEDICATIONS_COLLECTION_ID: ${{ secrets.VITE_APPWRITE_MEDICATIONS_COLLECTION_ID }}
-          VITE_APPWRITE_LOGS_COLLECTION_ID: ${{ secrets.VITE_APPWRITE_LOGS_COLLECTION_ID }}
-          VITE_APPWRITE_PROFILES_COLLECTION_ID: ${{ secrets.VITE_APPWRITE_PROFILES_COLLECTION_ID }}
-          VITE_APPWRITE_COPY_FUNCTION_ID: ${{ secrets.VITE_APPWRITE_COPY_FUNCTION_ID }}
-          VITE_APPWRITE_FCM_PROVIDER_ID: ${{ secrets.VITE_APPWRITE_FCM_PROVIDER_ID }}
-          VITE_FIREBASE_API_KEY: ${{ secrets.VITE_FIREBASE_API_KEY }}
-          VITE_FIREBASE_AUTH_DOMAIN: ${{ secrets.VITE_FIREBASE_AUTH_DOMAIN }}
-          VITE_FIREBASE_PROJECT_ID: ${{ secrets.VITE_FIREBASE_PROJECT_ID }}
-          VITE_FIREBASE_STORAGE_BUCKET: ${{ secrets.VITE_FIREBASE_STORAGE_BUCKET }}
-          VITE_FIREBASE_MESSAGING_SENDER_ID: ${{ secrets.VITE_FIREBASE_MESSAGING_SENDER_ID }}
-          VITE_FIREBASE_APP_ID: ${{ secrets.VITE_FIREBASE_APP_ID }}
-          VITE_FIREBASE_VAPID_KEY: ${{ secrets.VITE_FIREBASE_VAPID_KEY }}
+          DOPPLER_TOKEN: ${{ secrets.DOPPLER_AT_SECRETS }}
 
-      - name: Add .nojekyll
-        run: touch dist/.nojekyll
+      - name: Install rsync + ssh client
+        run: apt-get update -qq && apt-get install -y -qq rsync openssh-client
 
-      - uses: actions/upload-pages-artifact@v3
-        with:
-          path: dist
+      - name: Configure SSH
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/deploy_key
+          chmod 600 ~/.ssh/deploy_key
+          ssh-keyscan -H "${{ secrets.DEPLOY_HOST }}" >> ~/.ssh/known_hosts
 
-      - uses: actions/deploy-pages@v4
-        id: deployment
+      - name: Ensure destination folder exists
+        run: |
+          ssh -i ~/.ssh/deploy_key deploy@${{ secrets.DEPLOY_HOST }} \
+          "mkdir -p /srv/sites/${{ env.APP_FOLDER }} && chmod 755 /srv/sites/${{ env.APP_FOLDER }}"
+
+      - name: Upload site
+        run: |
+          rsync -avz --delete \
+            -e "ssh -i ~/.ssh/deploy_key" \
+            ./dist/ deploy@${{ secrets.DEPLOY_HOST }}:/srv/sites/${{ env.APP_FOLDER }}/

Taskfile.yml

@@ -4,9 +4,9 @@ version: '3'
 silent: true
 
 tasks:
-  run-dev:
+  dev-run:
     desc: Run the project in development mode
-    cmd: npm run dev
+    cmd: doppler run --config dev_secrets -- npm run dev
 
   build:
     desc: Build the project

doppler.yaml

@@ -0,0 +1,3 @@
+setup:
+  project: medminder
+  config: dev_secrets