pezkuwichain 90f94df24b ci: make backend indexer deploy self-contained + config-gated ...

Two problems with the backend deploy, fixed together:

1. It errored on every main push with 'missing server host' because
   BACKEND_VPS_* wasn't set. A permanently-red job is a broken window —
   it trains people to ignore deploy alerts and hides real failures.
   Add a backend-cfg check job; deploy-backend now runs only when
   BACKEND_VPS_HOST is set and skips cleanly (neutral) otherwise,
   activating automatically once the host is provisioned.

2. It required a hand-placed /opt/pwap-indexer/.env on the host — a
   fragile out-of-band manual step. The deployed image runs only the
   indexer (src/index.js), which needs just WS_ENDPOINT beyond the fixed
   PORT/DB_PATH (no KYC/council service, so no seed/Supabase secret).
   Inject WS_ENDPOINT from the workflow (INDEXER_WS_ENDPOINT secret with a
   public default) via -e; drop the --env-file dependency. Config now lives
   in the pipeline, not a manual file on the box.

2026-07-25 21:08:07 -07:00

..

codeql.yml

ci(security): Faz 3 + ekstra — runner consolidation, auto-rollback, cosign, SRI, dep cleanup

2026-05-09 12:08:49 +03:00

quality-gate.yml

ci: make backend indexer deploy self-contained + config-gated

2026-07-25 21:08:07 -07:00