From 6d9374da754115330239878200b63727155ae963 Mon Sep 17 00:00:00 2001
From: Leon Morival <leon.morival@gmail.com>
Date: Tue, 26 May 2026 11:03:13 +0200
Subject: [PATCH] feat: aws secret key

---
 .gitea/workflows/deploy.yml | 8 ++++++++
 config/deploy.yml           | 5 +++++
 2 files changed, 13 insertions(+)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index eb9785c..1b745eb 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -56,10 +56,14 @@ jobs:
           STRAVA_CLIENT_ID: ${{ secrets.STRAVA_CLIENT_ID }}
           STRAVA_CLIENT_SECRET: ${{ secrets.STRAVA_CLIENT_SECRET }}
           RESEND_API_KEY: ${{ secrets.RESEND_API_KEY }}
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
 
         run: |
           set -eu
           : "${GEMINI_API_KEY:?GEMINI_API_KEY secret is required}"
+          : "${AWS_ACCESS_KEY_ID:?AWS_ACCESS_KEY_ID secret is required}"
+          : "${AWS_SECRET_ACCESS_KEY:?AWS_SECRET_ACCESS_KEY secret is required}"
 
           WORKSPACE="${GITHUB_WORKSPACE:-$PWD}"
           test -f "$WORKSPACE/config/deploy.yml"
@@ -84,6 +88,8 @@ jobs:
             -e STRAVA_CLIENT_ID \
             -e STRAVA_CLIENT_SECRET \
             -e RESEND_API_KEY \
+            -e AWS_ACCESS_KEY_ID \
+            -e AWS_SECRET_ACCESS_KEY \
             --entrypoint /bin/sh \
             "$KAMAL_IMAGE" -lc '
               set -eu
@@ -125,6 +131,8 @@ jobs:
           STRAVA_CLIENT_ID=$STRAVA_CLIENT_ID
           STRAVA_CLIENT_SECRET=$STRAVA_CLIENT_SECRET
           RESEND_API_KEY=$RESEND_API_KEY
+          AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID
+          AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY
           SECRETS
               chmod 600 .kamal/secrets
 
diff --git a/config/deploy.yml b/config/deploy.yml
index a20c8de..dccec02 100644
--- a/config/deploy.yml
+++ b/config/deploy.yml
@@ -63,6 +63,9 @@ env:
     SERVER_NAME: ":80"
     APP_RUNTIME: "Laravel\\FrankenPHP\\Runtime"
     FILESYSTEM_DISK: s3
+    AWS_DEFAULT_REGION: eu-north-1
+    AWS_BUCKET: bowli
+    AWS_USE_PATH_STYLE_ENDPOINT: "false"
     DB_CONNECTION: pgsql
     DB_HOST: bemeal-pgsql
     DB_PORT: "5432"
@@ -84,6 +87,8 @@ env:
     - STRAVA_CLIENT_ID
     - STRAVA_CLIENT_SECRET
     - RESEND_API_KEY
+    - AWS_ACCESS_KEY_ID
+    - AWS_SECRET_ACCESS_KEY
 
 volumes:
   - bemeal_storage_data:/var/www/html/storage/app