feat: aws secret key

.gitea/workflows/deploy.yml

@@ -56,10 +56,14 @@ jobs:
           STRAVA_CLIENT_ID: ${{ secrets.STRAVA_CLIENT_ID }}
           STRAVA_CLIENT_SECRET: ${{ secrets.STRAVA_CLIENT_SECRET }}
           RESEND_API_KEY: ${{ secrets.RESEND_API_KEY }}
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
 
         run: |
           set -eu
           : "${GEMINI_API_KEY:?GEMINI_API_KEY secret is required}"
+          : "${AWS_ACCESS_KEY_ID:?AWS_ACCESS_KEY_ID secret is required}"
+          : "${AWS_SECRET_ACCESS_KEY:?AWS_SECRET_ACCESS_KEY secret is required}"
 
           WORKSPACE="${GITHUB_WORKSPACE:-$PWD}"
           test -f "$WORKSPACE/config/deploy.yml"
@@ -84,6 +88,8 @@ jobs:
             -e STRAVA_CLIENT_ID \
             -e STRAVA_CLIENT_SECRET \
             -e RESEND_API_KEY \
+            -e AWS_ACCESS_KEY_ID \
+            -e AWS_SECRET_ACCESS_KEY \
             --entrypoint /bin/sh \
             "$KAMAL_IMAGE" -lc '
               set -eu
@@ -125,6 +131,8 @@ jobs:
           STRAVA_CLIENT_ID=$STRAVA_CLIENT_ID
           STRAVA_CLIENT_SECRET=$STRAVA_CLIENT_SECRET
           RESEND_API_KEY=$RESEND_API_KEY
+          AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID
+          AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY
           SECRETS
               chmod 600 .kamal/secrets