allow secret key to be passed in...secretly in CI

Author: anarchivist

.github/workflows/build.yml

@@ -114,6 +114,7 @@ jobs:
     env:
       COMPOSE_FILE: docker-compose.yml:docker-compose.ci.yml
       DOCKER_APP_IMAGE: ${{ needs.merge.outputs.image }}
+      SECRET_KEY_BASE: ${{ secrets.SECRET_KEY_BASE }}
     steps:
       - name: Checkout code
         uses: actions/checkout@v4

docker-compose.ci.yml

@@ -6,6 +6,8 @@ services:
     image: ${DOCKER_APP_IMAGE}
     volumes: !override
       - artifacts:/opt/app/artifacts
+    environment:
+      SECRET_KEY_BASE: ${SECRET_KEY_BASE:?error}
 
   db:
     volumes: !reset