hugo.yml

name: Hugo

on:
  push:
    branches:
      - main
  pull_request:

env:
  HUGO_ENV: production

jobs:
  build-deploy:
    runs-on: ubuntu-latest

    permissions:
      id-token: write
      contents: read
      pull-requests: write

    defaults:
      run:
        shell: bash
  
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup node
        uses: actions/setup-node@v4
        with:
          node-version: 'lts/*'

      - run: npm ci

      - name: Setup Hugo
        uses: peaceiris/actions-hugo@v2
        with:
          hugo-version: '0.122.0'
          extended: true

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNT_ID }}:role/ugns-gbl-github-actions
          role-session-name: ugns-github-actions
          aws-region: us-east-1

      - name: Assume IAM Role
        uses: aws-actions/configure-aws-credentials@v4
        with:
          role-to-assume: arn:aws:iam::072105303426:role/GitHubActionsExecution
          role-skip-session-tagging: true
          role-chaining: true
          aws-region: us-east-1

      - name: Hugo Build
        run: hugo --gc --enableGitInfo --minify

      - name: Hugo Deploy (dry-run)
        if: github.event_name == 'pull_request'
        run: hugo deploy --dryRun --target AWS

      - name: Hugo Deploy
        if: github.ref == 'refs/heads/main' && github.event_name == 'push'
        run: hugo deploy --target AWS