feat: onboard personal-site-2026 (Cloud Run + Firebase Hosting) - #40
Merged
Conversation
Deno/Fresh SSR portfolio. Identity (SA + WIF pinned to poly-glot/personal-site-2026), Firebase Hosting site, and a Cloud Run service with 2 vCPU + startup CPU boost for fast cold starts, scaling to zero. Pure SSR — no Firestore/BigQuery. Health probe on /.
Terraform Plan
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Onboards personal-site-2026 (Deno/Fresh SSR portfolio) onto the shared
firebase-cloud-491613project in europe-west2 (London).What this creates
personal-site-2026-ci-cd+personal-site-2026-runtimeSAs and a WIF provider pinned topoly-glot/personal-site-2026.personal-site-2026.personal-site-2026— full SSR (all routes rewrite to it). No Firestore/BigQuery.junaid.guruserves;www.junaid.guru301-redirects to the apex.Cloud Run config
cpu = 1(module default) +startup_cpu_boost(module, hardcoded) → fast cold start without over-provisioning.max_instances = 1,health_path = "/".Caching
Hosting CDN honours the app's
stale-while-revalidate(s-maxage=600, stale-while-revalidate=86400);firebase.jsonsets security headers only, soCache-Controlpasses through untouched.After merge (CI runs
terraform apply)terraform output personal_site_2026_required_dns→ add the A/AAAA (+TXT) records forjunaid.guruandwwwat the registrar. MX/email untouched.gh secret set WIF_PROVIDER -R poly-glot/personal-site-2026 --body "$(terraform -chdir=terraform output -raw personal_site_2026_wif_provider)"gh secret set GCP_SA_EMAIL -R poly-glot/personal-site-2026 --body "$(terraform -chdir=terraform output -raw personal_site_2026_gcp_sa_email)"poly-glot/personal-site-2026tomain→ its CD builds the image, deploys Cloud Run + Hosting.