deploy.yml

name: Deploy

on:
  push:
    branches: [ main, master ]

  workflow_dispatch:

env:
  AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
  AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
  AWS_DEFAULT_REGION: us-east-1
  TG_WORKING_DIR: terragrunt/live/website

# configure concurrency to prevent multiple runs at the same time
concurrency:
  group: ${{ github.workflow }}

jobs:
  build:
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v5

    - name: Set up Ruby
      uses: ruby/setup-ruby@v1
      with:
        bundler-cache: true

    - name: Setup Terraform
      uses: hashicorp/setup-terraform@v3.1.2
      with:
        terraform_version: 1.5.7
        terraform_wrapper: true

    - name: Setup Terragrunt
      uses: autero1/action-terragrunt@v3.0.2
      with:
        terragrunt-version: 0.55.18
        token: ${{ secrets.GITHUB_TOKEN }}

    - name: Upgrade Provider
      run: |
        echo "Upgrading AWS provider..."
        terragrunt init --terragrunt-working-dir $TG_WORKING_DIR --upgrade

    - name: Terragrunt Plan
      run: terragrunt plan --terragrunt-working-dir $TG_WORKING_DIR

    - name: Terragrunt Apply
      run: terragrunt apply -auto-approve --terragrunt-working-dir $TG_WORKING_DIR

    - name: Terragrunt Output
      id: terraform
      run: |
        printf "distribution_id=%s\n" $(terragrunt output --terragrunt-working-dir $TG_WORKING_DIR distribution_id) >> "$GITHUB_OUTPUT"
        printf "bucket_name=%s\n" $(terragrunt output --terragrunt-working-dir $TG_WORKING_DIR bucket_name) >> "$GITHUB_OUTPUT"

    - name: Build Jekyll project
      run: bundle exec rake build

    - name: Copy output to S3
      run: aws s3 sync ./_site/ s3://${{ steps.terraform.outputs.bucket_name }} --acl public-read --delete --cache-control max-age=604800

    - name: Invalidate Cloudfront
      run: aws cloudfront create-invalidation --distribution-id ${{ steps.terraform.outputs.distribution_id }} --paths "/*"