Commit366179eunknown_key

ci(fly-deploy): sync app secrets from GitHub before deploy

ci(fly-deploy): sync app secrets from GitHub before deploy

Adds a step that stages DATABASE_URL (secret) + APP_BASE_URL /
DEMO_SEED_ON_BOOT / EMAIL_PROVIDER (vars with defaults) into Fly
before the deploy step. --stage avoids extra restarts since the
subsequent deploy applies them atomically.

Means the user only needs to set secrets in ONE place (GitHub),
not in both GitHub and Fly dashboard.

https://claude.ai/code/session_017Do52tMX1P9jPTWXhEohXH

Claude committed on April 22, 2026Parent: c93926e

1 file changed+14−0366179eb162be005fb3e1eb2653c3c18dca23f05

1 changed file+14−0

Modified.github/workflows/fly-deploy.yml+14−0View fileUnified Split

@@ -43,6 +43,20 @@ jobs:

4343 env:

4444 FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}

4545

46 - name: Sync application secrets to Fly

47 run: |

48 flyctl secrets set --app gluecron --stage \

49 DATABASE_URL="$DATABASE_URL" \

50 APP_BASE_URL="$APP_BASE_URL" \

51 DEMO_SEED_ON_BOOT="$DEMO_SEED_ON_BOOT" \

52 EMAIL_PROVIDER="$EMAIL_PROVIDER"

53 env:

54 FLY_API_TOKEN: ${{ secrets.FLY_API_TOKEN }}

55 DATABASE_URL: ${{ secrets.DATABASE_URL }}

56 APP_BASE_URL: ${{ vars.APP_BASE_URL || 'https://gluecron.fly.dev' }}

57 DEMO_SEED_ON_BOOT: ${{ vars.DEMO_SEED_ON_BOOT || '1' }}

58 EMAIL_PROVIDER: ${{ vars.EMAIL_PROVIDER || 'log' }}

4660 - name: Deploy

4761 run: flyctl deploy --remote-only --app gluecron

4862 env:

4963