fix: move environment variables to build args in CI workflow and Dockerfile

Author: SourasishBasu

.github/workflows/ci.yml

@@ -34,28 +34,28 @@ jobs:
           context: .
           push: true
           tags: ghcr.io/3xcaffeine/${{ env.IMAGE_NAME }}:latest
-        env:
-          BETTER_AUTH_SECRET: ${{ secrets.BETTER_AUTH_SECRET }}
-          BETTER_AUTH_URL: ${{ secrets.BETTER_AUTH_URL }}
-          NEXT_PUBLIC_AUTH_URL: ${{ secrets.NEXT_PUBLIC_AUTH_URL }}
-          DATABASE_URL: ${{ secrets.DATABASE_URL }}
-          GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}
-          GOOGLE_CLIENT_SECRET: ${{ secrets.GOOGLE_CLIENT_SECRET }}
-          PGHOST: ${{ secrets.PGHOST }}
-          PGUSER: ${{ secrets.PGUSER }}
-          PGPASSWORD: ${{ secrets.PGPASSWORD }}
-          PGDATABASE: ${{ secrets.PGDATABASE }}
-          PGPORT: ${{ secrets.PGPORT }}
-          NEO4J_URI: ${{ secrets.NEO4J_URI }}
-          NEO4J_USERNAME: ${{ secrets.NEO4J_USERNAME }}
-          NEO4J_PASSWORD: ${{ secrets.NEO4J_PASSWORD }}
-          NEO4J_DATABASE: ${{ secrets.NEO4J_DATABASE }}
-          AURA_INSTANCEID: ${{ secrets.AURA_INSTANCEID }}
-          AURA_INSTANCENAME: ${{ secrets.AURA_INSTANCENAME }}
-          UPSTASH_REDIS_REST_URL: ${{ secrets.UPSTASH_REDIS_REST_URL }}
-          UPSTASH_REDIS_REST_TOKEN: ${{ secrets.UPSTASH_REDIS_REST_TOKEN }}
-          PHONE_NUMBER: ${{ secrets.PHONE_NUMBER }}
-          COUNTRY_CODE: ${{ secrets.COUNTRY_CODE }}
+          build-args: |
+            BETTER_AUTH_SECRET: ${{ secrets.BETTER_AUTH_SECRET }}
+            BETTER_AUTH_URL: ${{ secrets.BETTER_AUTH_URL }}
+            NEXT_PUBLIC_AUTH_URL: ${{ secrets.NEXT_PUBLIC_AUTH_URL }}
+            DATABASE_URL: ${{ secrets.DATABASE_URL }}
+            GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}
+            GOOGLE_CLIENT_SECRET: ${{ secrets.GOOGLE_CLIENT_SECRET }}
+            PGHOST: ${{ secrets.PGHOST }}
+            PGUSER: ${{ secrets.PGUSER }}
+            PGPASSWORD: ${{ secrets.PGPASSWORD }}
+            PGDATABASE: ${{ secrets.PGDATABASE }}
+            PGPORT: ${{ secrets.PGPORT }}
+            NEO4J_URI: ${{ secrets.NEO4J_URI }}
+            NEO4J_USERNAME: ${{ secrets.NEO4J_USERNAME }}
+            NEO4J_PASSWORD: ${{ secrets.NEO4J_PASSWORD }}
+            NEO4J_DATABASE: ${{ secrets.NEO4J_DATABASE }}
+            AURA_INSTANCEID: ${{ secrets.AURA_INSTANCEID }}
+            AURA_INSTANCENAME: ${{ secrets.AURA_INSTANCENAME }}
+            UPSTASH_REDIS_REST_URL: ${{ secrets.UPSTASH_REDIS_REST_URL }}
+            UPSTASH_REDIS_REST_TOKEN: ${{ secrets.UPSTASH_REDIS_REST_TOKEN }}
+            PHONE_NUMBER: ${{ secrets.PHONE_NUMBER }}
+            COUNTRY_CODE: ${{ secrets.COUNTRY_CODE }}
 
       - name: Log out from GHCR
         run: docker logout

Dockerfile

@@ -14,6 +14,49 @@ RUN bun install --frozen-lockfile
 
 # Builder stage
 FROM oven/bun:1-alpine AS builder
+ARG BETTER_AUTH_SECRET
+ARG BETTER_AUTH_URL
+ARG NEXT_PUBLIC_AUTH_URL
+ARG DATABASE_URL
+ARG GOOGLE_CLIENT_ID
+ARG GOOGLE_CLIENT_SECRET
+ARG PGHOST
+ARG PGUSER
+ARG PGPASSWORD
+ARG PGDATABASE
+ARG PGPORT
+ARG NEO4J_URI
+ARG NEO4J_USERNAME
+ARG NEO4J_PASSWORD
+ARG NEO4J_DATABASE
+ARG AURA_INSTANCEID
+ARG AURA_INSTANCENAME
+ARG UPSTASH_REDIS_REST_URL
+ARG UPSTASH_REDIS_REST_TOKEN
+ARG PHONE_NUMBER
+ARG COUNTRY_CODE
+
+ENV BETTER_AUTH_SECRET=$BETTER_AUTH_SECRET
+ENV BETTER_AUTH_URL=$BETTER_AUTH_URL
+ENV NEXT_PUBLIC_AUTH_URL=$NEXT_PUBLIC_AUTH_URL
+ENV DATABASE_URL=$DATABASE_URL
+ENV GOOGLE_CLIENT_ID=$GOOGLE_CLIENT_ID
+ENV GOOGLE_CLIENT_SECRET=$GOOGLE_CLIENT_SECRET
+ENV PGHOST=$PGHOST
+ENV PGUSER=$PGUSER
+ENV PGPASSWORD=$PGPASSWORD
+ENV PGDATABASE=$PGDATABASE
+ENV PGPORT=$PGPORT
+ENV NEO4J_URI=$NEO4J_URI
+ENV NEO4J_USERNAME=$NEO4J_USERNAME
+ENV NEO4J_PASSWORD=$NEO4J_PASSWORD
+ENV NEO4J_DATABASE=$NEO4J_DATABASE
+ENV AURA_INSTANCEID=$AURA_INSTANCEID
+ENV AURA_INSTANCENAME=$AURA_INSTANCENAME
+ENV UPSTASH_REDIS_REST_URL=$UPSTASH_REDIS_REST_URL
+ENV UPSTASH_REDIS_REST_TOKEN=$UPSTASH_REDIS_REST_TOKEN
+ENV PHONE_NUMBER=$PHONE_NUMBER
+ENV COUNTRY_CODE=$COUNTRY_CODE
 WORKDIR /app
 COPY --from=deps /app/node_modules ./node_modules
 COPY . .