From e80a407f08ac0b71ba0e0b290c7def53dd73c853 Mon Sep 17 00:00:00 2001 From: Harold Torres Date: Wed, 1 Apr 2026 12:46:02 +1100 Subject: [PATCH] chore: migrate Cloudflare account ID and Supabase URL from secrets to repository variables --- .github/workflows/deploy.yml | 4 ++-- README.md | 27 +++++++++++++++++---------- 2 files changed, 19 insertions(+), 12 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 7ac0d4f..6cd981d 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -41,13 +41,13 @@ jobs: uses: cloudflare/wrangler-action@v3 with: apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} - accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} + accountId: ${{ vars.CLOUDFLARE_ACCOUNT_ID }} command: deploy --config wrangler.supabase.toml secrets: | SUPABASE_URL SUPABASE_API_KEY WORKER_SHARED_SECRET env: - SUPABASE_URL: ${{ secrets.SUPABASE_URL }} + SUPABASE_URL: ${{ vars.SUPABASE_URL }} SUPABASE_API_KEY: ${{ secrets.SUPABASE_API_KEY }} WORKER_SHARED_SECRET: ${{ secrets.WORKER_SHARED_SECRET }} diff --git a/README.md b/README.md index e5cd4bf..6604b5c 100644 --- a/README.md +++ b/README.md @@ -346,16 +346,23 @@ This project uses GitHub Actions for continuous integration and automated Cloudf ### Required GitHub secrets -Open **Settings → Secrets and variables → Actions** in your GitHub repo and add the following secrets: - -| Secret | Used by | Where to find it | -| ----------------------- | ------------------------ | --------------------------------------------------- | -| `SUPABASE_DB_URL` | `supabase-keepalive.yml` | Supabase dashboard → Connect → Transaction mode | -| `CLOUDFLARE_API_TOKEN` | `deploy.yml` | Cloudflare dashboard → My Profile → API Tokens | -| `CLOUDFLARE_ACCOUNT_ID` | `deploy.yml` | Cloudflare dashboard → right-hand sidebar | -| `SUPABASE_URL` | `deploy.yml` | Supabase dashboard → Project Settings → Data API | -| `SUPABASE_API_KEY` | `deploy.yml` | Supabase dashboard → Project Settings → Data API | -| `WORKER_SHARED_SECRET` | `deploy.yml` | Must match `SUPABASE_WORKER_SECRET` in `.env.local` | +Open **Settings → Secrets and variables → Actions** in your GitHub repo and add: + +**Repository secrets** (sensitive credentials): + +| Secret | Used by | Where to find it | +| ---------------------- | ------------------------ | --------------------------------------------------- | +| `SUPABASE_DB_URL` | `supabase-keepalive.yml` | Supabase dashboard → Connect → Transaction mode | +| `CLOUDFLARE_API_TOKEN` | `deploy.yml` | Cloudflare dashboard → My Profile → API Tokens | +| `SUPABASE_API_KEY` | `deploy.yml` | Supabase dashboard → Project Settings → Data API | +| `WORKER_SHARED_SECRET` | `deploy.yml` | Must match `SUPABASE_WORKER_SECRET` in `.env.local` | + +**Repository variables** (non-sensitive config): + +| Variable | Used by | Where to find it | +| ----------------------- | ------------ | ------------------------------------------------ | +| `CLOUDFLARE_ACCOUNT_ID` | `deploy.yml` | Cloudflare dashboard → right-hand sidebar | +| `SUPABASE_URL` | `deploy.yml` | Supabase dashboard → Project Settings → Data API | ## Project Structure