bugfix(functions): use base64 encoded secret value

socialincome-san · Mar 3, 2024 · 383eb1b · 383eb1b
1 parent bf38ae5
commit 383eb1b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/deployment.yml b/.github/workflows/deployment.yml
@@ -85,7 +85,7 @@ jobs:
           echo POSTFINANCE_FTP_HOST=${{ vars.POSTFINANCE_FTP_HOST }} >> .env
           echo POSTFINANCE_FTP_PORT=${{ vars.POSTFINANCE_FTP_PORT }} >> .env
           echo POSTFINANCE_FTP_USER=${{ vars.POSTFINANCE_FTP_USER }} >> .env
-          echo POSTFINANCE_FTP_RSA_PRIVATE_KEY=${{ secrets.POSTFINANCE_FTP_RSA_PRIVATE_KEY }} >> .env
+          echo POSTFINANCE_FTP_RSA_PRIVATE_KEY_BASE64=${{ secrets.POSTFINANCE_FTP_RSA_PRIVATE_KEY_BASE64 }} >> .env
           echo STRIPE_API_READ_KEY=${{ (inputs.project == 'social-income-prod' && secrets.STRIPE_API_READ_KEY) || secrets.STRIPE_API_READ_KEY_STAGING }} >> .env
           echo STRIPE_WEBHOOK_SECRET=${{ (inputs.project == 'social-income-prod' && secrets.STRIPE_WEBHOOK_SECRET) || secrets.STRIPE_WEBHOOK_SECRET_STAGING }} >> .env
           echo NOTIFICATION_EMAIL_USER=${{ secrets.NOTIFICATION_EMAIL_USER }} >> .env

diff --git a/functions/src/config.ts b/functions/src/config.ts
@@ -12,7 +12,7 @@ export const POSTFINANCE_EMAIL_USER = process.env.POSTFINANCE_EMAIL_USER!;
 export const POSTFINANCE_EMAIL_PASSWORD = process.env.POSTFINANCE_EMAIL_PASSWORD!;
 
 export const POSTFINANCE_PAYMENTS_FILES_BUCKET = process.env.POSTFINANCE_PAYMENTS_FILES_BUCKET!;
-export const POSTFINANCE_FTP_RSA_PRIVATE_KEY = process.env.POSTFINANCE_FTP_RSA_PRIVATE_KEY!;
+export const POSTFINANCE_FTP_RSA_PRIVATE_KEY = atob(process.env.POSTFINANCE_FTP_RSA_PRIVATE_KEY_BASE64!);
 export const POSTFINANCE_FTP_HOST = process.env.POSTFINANCE_FTP_HOST!;
 export const POSTFINANCE_FTP_PORT = process.env.POSTFINANCE_FTP_PORT!;
 export const POSTFINANCE_FTP_USER = process.env.POSTFINANCE_FTP_USER!;