static.yml

# Simple workflow for deploying static content to GitHub Pages
name: Deploy static content to Pages

on:
  # Runs on pushes targeting the default branch
  #push:
  #  branches: ["master"]

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
permissions:
  contents: read
  pages: write
  id-token: write

# Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
# However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
concurrency:
  group: "pages"
  cancel-in-progress: false

jobs:
  # Single deploy job since we're just deploying
  deploy:
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Setup Pages
        uses: actions/configure-pages@v5
      - name: Sign mobileconfig profile
        env:
          SIGN_KEY: ${{ secrets.SIGN_KEY }}
          SIGN_CRT: ${{ secrets.SIGN_CRT }}
        run: |
          echo "$SIGN_KEY" > /tmp/sign.key
          echo "$SIGN_CRT" > /tmp/sign.crt
          openssl smime -sign \
            -in assets/configs/adguard_doh_ios.mobileconfig \
            -out assets/configs/adguard_doh_ios.mobileconfig.signed \
            -signer /tmp/sign.crt \
            -inkey /tmp/sign.key \
            -certfile /tmp/sign.crt \
            -outform der \
            -nodetach
          mv assets/configs/adguard_doh_ios.mobileconfig.signed assets/configs/adguard_doh_ios.mobileconfig
          rm -f /tmp/sign.key /tmp/sign.crt
      - name: Upload artifact
        uses: actions/upload-pages-artifact@v3
        with:
          # Upload entire repository
          path: '.'
      - name: Deploy to GitHub Pages
        id: deployment
        uses: actions/deploy-pages@v5