Medplum

name: Deploy concurrency: group: ci-deploy-${{ github.sha }} cancel-in-progress: false on: push: branches: [main] workflow_dispatch: permissions: contents: read jobs: build: name: Deploy runs-on: ubuntu-latest timeout-minutes: 45 if: github.repository == 'medplum/medplum' permissions: id-token: write env: NODE_VERSION: '22' TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }} TURBO_TEAM: ${{ secrets.TURBO_TEAM }} TURBO_CACHE: 'remote:rw' steps: - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: fetch-depth: 0 - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 with: node-version: '24' registry-url: 'https://registry.npmjs.org' - name: Cache node modules uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 env: cache-name: cache-node-modules with: path: ~/.npm key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('**/package-lock.json') }} restore-keys: | ${{ runner.os }}-build-${{ env.cache-name }}- ${{ runner.os }}-build- ${{ runner.os }}- - name: Install dependencies run: npm ci - name: Build run: npm run build:fast - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # v5.1.1 with: role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }} aws-region: ${{ secrets.AWS_REGION }} - name: Login to Docker Hub uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Setup Docker Buildx uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2.10.0 - name: Deploy run: ${{ github.event_name == 'workflow_dispatch' && (github.ref == 'refs/heads/main' && './scripts/cicd-deploy.sh --force') || './scripts/cicd-deploy.sh' }} env: APP_BUCKET: ${{ secrets.APP_BUCKET }} AWS_REGION: ${{ secrets.AWS_REGION }} SERVER_DOCKERHUB_REPOSITORY: ${{ secrets.DOCKERHUB_REPOSITORY }} APP_DOCKERHUB_REPOSITORY: ${{ secrets.APP_DOCKERHUB_REPOSITORY }} ECS_CLUSTER: ${{ secrets.ECS_CLUSTER }} ECS_SERVICE: ${{ secrets.ECS_SERVICE }} GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }} MEDPLUM_BASE_URL: ${{ secrets.MEDPLUM_BASE_URL }} MEDPLUM_INTROSPECTION_URL: ${{ secrets.MEDPLUM_INTROSPECTION_URL }} MEDPLUM_AWS_TEXTRACT_ENABLED: 'true' RECAPTCHA_SITE_KEY: ${{ secrets.RECAPTCHA_SITE_KEY }} SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}