decrypt for build

Author: Dawid Ciepiela

.gitattributes

@@ -1,2 +1,2 @@
 .gitattributes !filter !diff
-config.env filter=git-crypt diff=git-crypts
+config.env filter=git-crypt diff=git-crypt

.github/workflows/deploy.yml

@@ -21,6 +21,15 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Install git-crypt and decrypt repository
+        env:
+          GIT_CRYPT_KEY: ${{ secrets.GIT_CRYPT_KEY }}
+        run: |
+          sudo apt-get update && \
+          sudo apt-get install -y git-crypt && \
+          echo "$GIT_CRYPT_KEY" | base64 -d | git-crypt unlock - && \
+          git-crypt status -e
+
       - name: Deploy to Heroku
         uses: akhileshns/heroku-deploy@v3.13.15
         with:

Dockerfile

@@ -6,16 +6,20 @@ RUN python -m pip install --no-cache-dir -U pip wheel
 
 COPY ./requirements.txt /tmp/
 
-RUN python -OO -m pip wheel --no-cache-dir --wheel-dir=/tmp/wheels -r /tmp/requirements.txt
+RUN python -OO -m pip wheel --no-cache-dir --wheel-dir=/tmp/wheels -r /tmp/requirements.txt 
 
 FROM base
-COPY --from=builder /tmp/wheels /tmp/wheels
 
-RUN python -m pip install --no-cache --no-index /tmp/wheels/* && \
-    rm -rf /tmp/wheels && \
-    mkdir -p /app/src/
+COPY --from=builder /tmp/wheels /tmp/wheels
 
 ADD ./src /app/src
 ADD ./config.env /app/config.env
 
-CMD APP_RUN_MODE=PROD python -OO -B /app/src/main.py
+WORKDIR /app/src
+
+RUN python -m pip install --no-cache --no-index /tmp/wheels/* && \
+    rm -rf /tmp/wheels
+
+ENV APP_RUN_MODE=PROD
+ENTRYPOINT [ "python" ]
+CMD [ "-OO", "-B" ,"main.py" ]