ci: add deploy actions for website

.envrc.example

@@ -0,0 +1 @@
+use flake

.firebaserc

@@ -0,0 +1,5 @@
+{
+  "projects": {
+    "default": "penumbra-uips"
+  }
+}

.github/workflows/firebase-hosting-merge.yml

@@ -0,0 +1,28 @@
+# This file was auto-generated by the Firebase CLI
+# https://github.com/firebase/firebase-tools
+
+name: Deploy to Firebase Hosting on merge
+on:
+  push:
+    branches:
+      - main
+jobs:
+  build_and_deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: install nix
+        uses: DeterminateSystems/nix-installer-action@main
+      - name: load nix cache
+        uses: DeterminateSystems/magic-nix-cache-action@main
+
+      - name: build static docroot
+        run: nix develop --command just build
+
+      - uses: FirebaseExtended/action-hosting-deploy@v0
+        with:
+          repoToken: ${{ secrets.GITHUB_TOKEN }}
+          firebaseServiceAccount: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_PENUMBRA_UIPS }}
+          channelId: live
+          projectId: penumbra-uips

.github/workflows/firebase-hosting-pull-request.yml

@@ -0,0 +1,29 @@
+# This file was auto-generated by the Firebase CLI
+# https://github.com/firebase/firebase-tools
+
+name: Deploy to Firebase Hosting on PR
+on: pull_request
+permissions:
+  checks: write
+  contents: read
+  pull-requests: write
+jobs:
+  build_and_preview:
+    if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: install nix
+        uses: DeterminateSystems/nix-installer-action@main
+      - name: load nix cache
+        uses: DeterminateSystems/magic-nix-cache-action@main
+
+      - name: build static docroot
+        run: nix develop --command just build
+
+      - uses: FirebaseExtended/action-hosting-deploy@v0
+        with:
+          repoToken: ${{ secrets.GITHUB_TOKEN }}
+          firebaseServiceAccount: ${{ secrets.FIREBASE_SERVICE_ACCOUNT_PENUMBRA_UIPS }}
+          projectId: penumbra-uips

.gitignore

@@ -5,4 +5,11 @@ index.html
 cips/*.html
 
 # WGs - same note as above
-cips/wgs/**/*.html
+cips/wgs/**/*.html
+
+# ignore direnv; run `cp .envrc.example .envrc` to bootstrap dev tooling
+.envrc
+.direnv/
+
+# firebase for static website hosting
+.firebase/

firebase.json

@@ -0,0 +1,10 @@
+{
+  "hosting": {
+    "public": "book",
+    "ignore": [
+      "firebase.json",
+      "**/.*",
+      "**/node_modules/**"
+    ]
+  }
+}

flake.nix

@@ -0,0 +1,28 @@
+# in flake.nix
+{
+  inputs = {
+    # nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-24.05";
+    flake-utils.url = "github:numtide/flake-utils";
+  };
+  outputs = { self, nixpkgs, flake-utils }:
+    flake-utils.lib.eachDefaultSystem
+      (system:
+        let
+          pkgs = import nixpkgs {
+            inherit system ;
+          };
+        in
+        with pkgs;
+        {
+          devShells.default = mkShell {
+            buildInputs = [ 
+                firebase-tools
+                just
+                markdownlint-cli
+                mdbook
+            ];
+          };
+        }
+      );
+}

justfile

@@ -0,0 +1,20 @@
+# display this help menu
+list:
+    @just --list
+
+# build static site
+build:
+    mdbook build
+
+# run code linters to check formatting
+lint:
+    markdownlint --config .markdownlint.yaml '**/*.md'
+
+# run dev env with livereload, for local editing
+dev:
+    mdbook serve -n 127.0.0.1
+
+# run dev env via firebase, for a more prod-like local editing experience
+firebase-dev:
+    @just build
+    firebase emulators:start