feat: add JWT_SECRET to deployment and create .env file for environment variables

.gitea/workflows/deploy.yml

@@ -55,7 +55,8 @@ jobs:
         run: |
           ansible-playbook ansible/deploy.yml \
             -i /tmp/inventory.ini \
-            -e "artifact_path=${WORKSPACE}"
+            -e "artifact_path=${WORKSPACE}" \
+            -e "jwt_secret=${{ secrets.JWT_SECRET }}"
 
       - name: Cleanup
         if: always()

.gitea/workflows/release.yml

@@ -63,6 +63,10 @@ jobs:
                 - "3001:3001"
               volumes:
                 - brainwave-db:/app/backend/db
+              env_file:
+                - .env
+              environment:
+                - NODE_ENV=production
               restart: unless-stopped
           volumes:
             brainwave-db:
@@ -77,6 +81,10 @@ jobs:
                 - "3001:3001"
               volumes:
                 - brainwave-db:/app/backend/db
+              env_file:
+                - .env
+              environment:
+                - NODE_ENV=production
               restart: unless-stopped
           volumes:
             brainwave-db: