Merge pull request 'fix(ci): prod build needs EXPORT_SIGN_KEY for compose interpolation' (#174) from fix/prod-build-export-sign-key into development

2026-07-03 21:42:05 +00:00
parent 0dfecc2af7 c90331b189
commit 44117e906c
1 changed files with 6 additions and 0 deletions
@@ -46,6 +46,12 @@ jobs:
      # VITE_GATEWAY_URL omitted: the SPA is served same-origin (compose ":-" default).
      POSTGRES_PASSWORD: ${{ secrets.PROD_POSTGRES_PASSWORD }}
      GM_BASICAUTH_HASH: ${{ secrets.PROD_GM_BASICAUTH_HASH }}
+      # `docker compose build` interpolates the WHOLE compose file, so every :?-guarded
+      # runtime var must be present at build even though it is not a build-arg — incl. the
+      # backend's EXPORT_SIGN_KEY (added with the finished-game export after v1.7.0, which is
+      # why the first v1.8.0 build tripped on it). POSTGRES_PASSWORD/GM_BASICAUTH_HASH above
+      # are here for the same reason; DICT_VERSION + the derived Mini App URL cover the rest.
+      EXPORT_SIGN_KEY: ${{ secrets.PROD_EXPORT_SIGN_KEY }}
      # PUBLIC_BASE_URL drives the derived VK ID redirect (baked into the SPA) and the
      # Mini App URL; both are computed in the build step, not stored variables.
      PUBLIC_BASE_URL: ${{ vars.PROD_PUBLIC_BASE_URL }}