Refatorar workflow do Next.js: remover configuração de variáveis de ambiente e criar arquivo .env com segredos do GitHub

Author: PEAL-26

.github/workflows/nextjs.yml

@@ -31,26 +31,6 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-      - name: Set Environment Variables
-        run: |
-          echo "NEXT_PUBLIC_FIREBASE_API_KEY=$NEXT_PUBLIC_FIREBASE_API_KEY" >> "$GITHUB_ENV"
-          echo "NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN=$NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN" >> "$GITHUB_ENV"
-          echo "NEXT_PUBLIC_FIREBASE_PROJECT_ID=$NEXT_PUBLIC_FIREBASE_PROJECT_ID" >> "$GITHUB_ENV"
-          echo "NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET=$NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET" >> "$GITHUB_ENV"
-          echo "NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID=$NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID" >> "$GITHUB_ENV"
-          echo "NEXT_PUBLIC_FIREBASE_APP_ID=$NEXT_PUBLIC_FIREBASE_APP_ID" >> "$GITHUB_ENV"
-          echo "NEXT_PUBLIC_FIREBASE_KEY_SITE_RECAPTCHA_ENTERPRISE=$NEXT_PUBLIC_FIREBASE_KEY_SITE_RECAPTCHA_ENTERPRISE" >> "$GITHUB_ENV"
-          echo "NEXT_PUBLIC_EMAIL_PROPRIETARIO_AUTH=$NEXT_PUBLIC_EMAIL_PROPRIETARIO_AUTH" >> "$GITHUB_ENV"
-        env:
-          NEXT_PUBLIC_FIREBASE_API_KEY: ${{secrets.NEXT_PUBLIC_FIREBASE_API_KEY}}
-          NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN: ${{secrets.NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN}}
-          NEXT_PUBLIC_FIREBASE_PROJECT_ID: ${{secrets.NEXT_PUBLIC_FIREBASE_PROJECT_ID}}
-          NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET: ${{secrets.NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET}}
-          NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID: ${{secrets.NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID}}
-          NEXT_PUBLIC_FIREBASE_APP_ID: ${{secrets.NEXT_PUBLIC_FIREBASE_APP_ID}}
-          NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID: ${{secrets.NEXT_PUBLIC_FIREBASE_MEASUREMENT_ID}}
-          NEXT_PUBLIC_FIREBASE_KEY_SITE_RECAPTCHA_ENTERPRISE: ${{secrets.NEXT_PUBLIC_FIREBASE_KEY_SITE_RECAPTCHA_ENTERPRISE}}
-          NEXT_PUBLIC_EMAIL_PROPRIETARIO_AUTH: ${{secrets.NEXT_PUBLIC_EMAIL_PROPRIETARIO_AUTH}}
       - name: Detect package manager
         id: detect-package-manager
         run: |
@@ -91,6 +71,16 @@ jobs:
           # If source files changed but packages didn't, rebuild from a prior cache.
           restore-keys: |
             ${{ runner.os }}-nextjs-${{ hashFiles('**/package-lock.json', '**/yarn.lock') }}-
+      - name: Create .env file
+        run: |
+          echo "NEXT_PUBLIC_FIREBASE_API_KEY=${{ secrets.NEXT_PUBLIC_FIREBASE_API_KEY }}" >> .env
+          echo "NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN=${{ secrets.NEXT_PUBLIC_FIREBASE_AUTH_DOMAIN }}" >> .env
+          echo "NEXT_PUBLIC_FIREBASE_PROJECT_ID=${{ secrets.NEXT_PUBLIC_FIREBASE_PROJECT_ID }}" >> .env
+          echo "NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET=${{ secrets.NEXT_PUBLIC_FIREBASE_STORAGE_BUCKET }}" >> .env
+          echo "NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID=${{ secrets.NEXT_PUBLIC_FIREBASE_MESSAGING_SENDER_ID }}" >> .env
+          echo "NEXT_PUBLIC_FIREBASE_APP_ID=${{ secrets.NEXT_PUBLIC_FIREBASE_APP_ID }}" >> .env
+          echo "NEXT_PUBLIC_FIREBASE_KEY_SITE_RECAPTCHA_ENTERPRISE=${{ secrets.NEXT_PUBLIC_FIREBASE_KEY_SITE_RECAPTCHA_ENTERPRISE }}" >> .env
+          echo "NEXT_PUBLIC_EMAIL_PROPRIETARIO_AUTH=${{ secrets.NEXT_PUBLIC_EMAIL_PROPRIETARIO_AUTH }}" >> .env
       - name: Install dependencies
         run: ${{ steps.detect-package-manager.outputs.manager }} ${{ steps.detect-package-manager.outputs.command }}
       - name: Build with Next.js