ref: move ci

Author: marco-souza

.github/workflows/deploy.yml

@@ -2,8 +2,6 @@ name: Deploy
 
 on:
   push:
-    tags:
-      - "v*"
     branches:
       - main
 
@@ -12,27 +10,14 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  detect-deploy:
-    runs-on: ubuntu-latest
-    outputs:
-      stack: ${{ steps.detect.outputs.stack }}
-    steps:
-      - id: detect
-        run: |
-          if [[ "${{ github.ref_type }}" == "tag" && "${{ github.ref_name }}" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
-            echo "stack=production" >> $GITHUB_OUTPUT
-          else
-            echo "stack=dev" >> $GITHUB_OUTPUT
-          fi
-
   deploy:
-    needs: detect-deploy
     runs-on: ubuntu-latest
     environment: cloudflare
     timeout-minutes: 20
     permissions:
       contents: read
       id-token: write
+
     steps:
       - uses: actions/checkout@v6
         with:
@@ -54,7 +39,7 @@ jobs:
         with:
           command: up
           work-dir: infra
-          stack-name: ${{ needs.detect-deploy.outputs.stack }}
+          stack-name: dev
           cloud-url: ${{ secrets.PULUMI_BACKEND_URL }}
         env:
           AWS_REGION: auto

.github/workflows/release.yml

@@ -10,8 +10,47 @@ permissions:
   contents: write
 
 jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    environment: cloudflare
+    timeout-minutes: 20
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: ${{ github.sha }}
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version-file: ".node-version"
+
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Applying infrastructure 🚀
+        uses: pulumi/actions@v6
+        with:
+          command: up
+          work-dir: infra
+          stack-name: production
+          cloud-url: ${{ secrets.PULUMI_BACKEND_URL }}
+        env:
+          AWS_REGION: auto
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          PULUMI_CONFIG_PASSPHRASE: ${{ secrets.PULUMI_CONFIG_PASSPHRASE }}
+
   release:
     name: Create Release
+    needs: deploy
     runs-on: ubuntu-latest
 
     steps: