feat: aws secret key

.gitea/workflows/deploy.yml

@@ -56,10 +56,14 @@ jobs:
           STRAVA_CLIENT_ID: ${{ secrets.STRAVA_CLIENT_ID }}
           STRAVA_CLIENT_SECRET: ${{ secrets.STRAVA_CLIENT_SECRET }}
           RESEND_API_KEY: ${{ secrets.RESEND_API_KEY }}
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
 
         run: |
           set -eu
           : "${GEMINI_API_KEY:?GEMINI_API_KEY secret is required}"
+          : "${AWS_ACCESS_KEY_ID:?AWS_ACCESS_KEY_ID secret is required}"
+          : "${AWS_SECRET_ACCESS_KEY:?AWS_SECRET_ACCESS_KEY secret is required}"
 
           WORKSPACE="${GITHUB_WORKSPACE:-$PWD}"
           test -f "$WORKSPACE/config/deploy.yml"
@@ -84,6 +88,8 @@ jobs:
             -e STRAVA_CLIENT_ID \
             -e STRAVA_CLIENT_SECRET \
             -e RESEND_API_KEY \
+            -e AWS_ACCESS_KEY_ID \
+            -e AWS_SECRET_ACCESS_KEY \
             --entrypoint /bin/sh \
             "$KAMAL_IMAGE" -lc '
               set -eu
@@ -125,6 +131,8 @@ jobs:
           STRAVA_CLIENT_ID=$STRAVA_CLIENT_ID
           STRAVA_CLIENT_SECRET=$STRAVA_CLIENT_SECRET
           RESEND_API_KEY=$RESEND_API_KEY
+          AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID
+          AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY
           SECRETS
               chmod 600 .kamal/secrets
 

config/deploy.yml

@@ -63,6 +63,9 @@ env:
     SERVER_NAME: ":80"
     APP_RUNTIME: "Laravel\\FrankenPHP\\Runtime"
     FILESYSTEM_DISK: s3
+    AWS_DEFAULT_REGION: eu-north-1
+    AWS_BUCKET: bowli
+    AWS_USE_PATH_STYLE_ENDPOINT: "false"
     DB_CONNECTION: pgsql
     DB_HOST: bemeal-pgsql
     DB_PORT: "5432"
@@ -84,6 +87,8 @@ env:
     - STRAVA_CLIENT_ID
     - STRAVA_CLIENT_SECRET
     - RESEND_API_KEY
+    - AWS_ACCESS_KEY_ID
+    - AWS_SECRET_ACCESS_KEY
 
 volumes:
   - bemeal_storage_data:/var/www/html/storage/app