39 lines
986 B
Markdown
39 lines
986 B
Markdown
# Consuming Repository Configuration
|
|
|
|
## Laravel deployment variables
|
|
|
|
```text
|
|
SERVER_DEPLOY_ROOT=/opt/1panel/apps/openresty/openresty/www/sites/example.com/index
|
|
SERVER_CONTAINER_DEPLOY_ROOT=/www/sites/example.com/index
|
|
SERVER_PHP_CONTAINER=php82-example
|
|
SERVER_HEALTHCHECK_URL=https://example.com/up
|
|
```
|
|
|
|
Laravel deployment secret:
|
|
|
|
```text
|
|
SERVER_BACKUP_COMMAND=/usr/local/sbin/backup-example-database
|
|
```
|
|
|
|
The command should be a root-owned server-side wrapper. Do not put database passwords directly in a workflow.
|
|
|
|
## Mini Program variables
|
|
|
|
```text
|
|
MINIAPP_APPID=wx0000000000000000
|
|
MINIAPP_API_URL=https://example.com/api
|
|
MINIAPP_ROBOT=1
|
|
```
|
|
|
|
Mini Program secret:
|
|
|
|
```text
|
|
WECHAT_CI_PRIVATE_KEY=<complete code-upload private key>
|
|
```
|
|
|
|
Add the Runner's fixed public egress IP to the WeChat code-upload whitelist.
|
|
|
|
## Production Runner
|
|
|
|
Register a repository-scoped host Runner label named `production`. Pull-request workflows must not use this label or access production secrets.
|