From 309396997b2e2c1856531537128ca8784e654b4d Mon Sep 17 00:00:00 2001 From: victhorbi Date: Wed, 5 Aug 2026 17:05:12 +0200 Subject: [PATCH 1/2] ci: add NEXT_PUBLIC_TRANSAK_ENVIRONMENT to preview (staging) and cloudfront (production) deploys --- .github/workflows/deploy-cloudfront.yaml | 3 +++ .github/workflows/deploy-preview.yaml | 1 + 2 files changed, 4 insertions(+) diff --git a/.github/workflows/deploy-cloudfront.yaml b/.github/workflows/deploy-cloudfront.yaml index 015fc0a6..90450280 100644 --- a/.github/workflows/deploy-cloudfront.yaml +++ b/.github/workflows/deploy-cloudfront.yaml @@ -28,6 +28,9 @@ jobs: NEXT_PUBLIC_PRIVY_APP_ID: ${{ secrets.NEXT_PUBLIC_PRIVY_APP_ID }} NEXT_PUBLIC_PRIVY_CLIENT_ID: ${{ secrets.NEXT_PUBLIC_PRIVY_CLIENT_ID }} NEXT_PUBLIC_DELEGATOR_URL: ${{ secrets.NEXT_PUBLIC_DELEGATOR_URL }} + NEXT_PUBLIC_TRANSAK_API_KEY: ${{ secrets.NEXT_PUBLIC_TRANSAK_API_KEY }} + NEXT_PUBLIC_TRANSAK_API_URL: ${{ secrets.NEXT_PUBLIC_TRANSAK_API_URL }} + NEXT_PUBLIC_TRANSAK_ENVIRONMENT: 'production' NEXT_PUBLIC_NETWORK_TYPE: 'main' AWS_REGION: eu-west-1 steps: diff --git a/.github/workflows/deploy-preview.yaml b/.github/workflows/deploy-preview.yaml index 64f06cf9..15ae3b2e 100644 --- a/.github/workflows/deploy-preview.yaml +++ b/.github/workflows/deploy-preview.yaml @@ -71,6 +71,7 @@ jobs: NEXT_PUBLIC_DELEGATOR_URL: ${{ secrets.NEXT_PUBLIC_DELEGATOR_URL }} NEXT_PUBLIC_TRANSAK_API_KEY: ${{ secrets.NEXT_PUBLIC_TRANSAK_API_KEY }} NEXT_PUBLIC_TRANSAK_API_URL: ${{ secrets.NEXT_PUBLIC_TRANSAK_API_URL }} + NEXT_PUBLIC_TRANSAK_ENVIRONMENT: 'staging' NEXT_PUBLIC_NETWORK_TYPE: 'main' AWS_REGION: eu-west-1 BRANCH_NAME: ${{ github.event.pull_request.head.ref }} From 808f04ab281dc264c27ef874669fd91be385b43f Mon Sep 17 00:00:00 2001 From: Luca Bandini Date: Wed, 5 Aug 2026 17:17:02 +0200 Subject: [PATCH 2/2] ci: split Transak API key secret per environment - deploy-preview uses NEXT_PUBLIC_TRANSAK_API_KEY_STAGING - deploy-cloudfront uses NEXT_PUBLIC_TRANSAK_API_KEY_PROD Keeps the prod site inert (Buy hidden) until the production key exists: key absent = transak config disabled in the example wrapper. --- .github/workflows/deploy-cloudfront.yaml | 2 +- .github/workflows/deploy-preview.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/deploy-cloudfront.yaml b/.github/workflows/deploy-cloudfront.yaml index 90450280..3f4994f3 100644 --- a/.github/workflows/deploy-cloudfront.yaml +++ b/.github/workflows/deploy-cloudfront.yaml @@ -28,7 +28,7 @@ jobs: NEXT_PUBLIC_PRIVY_APP_ID: ${{ secrets.NEXT_PUBLIC_PRIVY_APP_ID }} NEXT_PUBLIC_PRIVY_CLIENT_ID: ${{ secrets.NEXT_PUBLIC_PRIVY_CLIENT_ID }} NEXT_PUBLIC_DELEGATOR_URL: ${{ secrets.NEXT_PUBLIC_DELEGATOR_URL }} - NEXT_PUBLIC_TRANSAK_API_KEY: ${{ secrets.NEXT_PUBLIC_TRANSAK_API_KEY }} + NEXT_PUBLIC_TRANSAK_API_KEY: ${{ secrets.NEXT_PUBLIC_TRANSAK_API_KEY_PROD }} NEXT_PUBLIC_TRANSAK_API_URL: ${{ secrets.NEXT_PUBLIC_TRANSAK_API_URL }} NEXT_PUBLIC_TRANSAK_ENVIRONMENT: 'production' NEXT_PUBLIC_NETWORK_TYPE: 'main' diff --git a/.github/workflows/deploy-preview.yaml b/.github/workflows/deploy-preview.yaml index 15ae3b2e..fad32ba4 100644 --- a/.github/workflows/deploy-preview.yaml +++ b/.github/workflows/deploy-preview.yaml @@ -69,7 +69,7 @@ jobs: NEXT_PUBLIC_PRIVY_APP_ID: ${{ secrets.NEXT_PUBLIC_PRIVY_APP_ID }} NEXT_PUBLIC_PRIVY_CLIENT_ID: ${{ secrets.NEXT_PUBLIC_PRIVY_CLIENT_ID }} NEXT_PUBLIC_DELEGATOR_URL: ${{ secrets.NEXT_PUBLIC_DELEGATOR_URL }} - NEXT_PUBLIC_TRANSAK_API_KEY: ${{ secrets.NEXT_PUBLIC_TRANSAK_API_KEY }} + NEXT_PUBLIC_TRANSAK_API_KEY: ${{ secrets.NEXT_PUBLIC_TRANSAK_API_KEY_STAGING }} NEXT_PUBLIC_TRANSAK_API_URL: ${{ secrets.NEXT_PUBLIC_TRANSAK_API_URL }} NEXT_PUBLIC_TRANSAK_ENVIRONMENT: 'staging' NEXT_PUBLIC_NETWORK_TYPE: 'main'