use env secrets in codegen step

.github/workflows/deploy.yml

@@ -5,7 +5,7 @@ on:
     branches:
       - main
       - develop
-  pull_request: {}
+  # pull_request: {}
 jobs:
   # typecheck:
   #   name: Check Types
@@ -31,7 +31,7 @@ jobs:
     name: Deploy
     runs-on: ubuntu-latest
     # needs: typecheck
-    if: ${{ (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/develop') && github.event_name == 'push' }}
+    if: ${{ github.ref == 'refs/heads/main' || github.ref == 'refs/heads/develop' }}
     steps:
       - name: Cancel previous runs
         uses: styfle/[email protected]
@@ -59,6 +59,7 @@ jobs:
     name: Post-Deployment Tasks
     runs-on: ubuntu-latest
     needs: deploy
+    if: ${{ github.ref == 'refs/heads/main' }}
     steps:
       - name: Purge Cloudflare Cache
         uses: jakejarvis/cloudflare-purge-action@master

Dockerfile

@@ -26,17 +26,19 @@ RUN npm install --include=dev
 # Copy application code
 COPY --link . .
 
+# Create environment file
+RUN --mount=type=secret,id=dotenv,dst=env \
+    tr ' ' '\n' < env > .env
+
+# Generate code
 RUN npm run codegen
 
 # Build application
-RUN --mount=type=secret,id=dotenv,dst=env \
-    tr ' ' '\n' < env > .env && \
-    npm run build
+RUN npm run build
 
 # Remove development dependencies
 RUN npm prune --omit=dev
 
-
 # Final stage for app image
 FROM base