Finalize deploy workflow env and playbook args

.github/workflows/pipeline.yaml

@@ -46,10 +46,16 @@ env:
   SECONDARY_DOMAIN: console.onwalk.net
   NEXT_PUBLIC_RUNTIME_ENVIRONMENT: prod
   NEXT_PUBLIC_RUNTIME_REGION: cn
+  ACCOUNT_SERVICE_URL: https://accounts.svc.plus
+  CLOUDFLARE_ZONE_TAG: bf3427f83a2c52c8285ab3d741a6ee27
+  CLOUDFLARE_WEB_ANALYTICS_SITE_TAG: 0973e84ec8872c67c570f8072e92e21b
+  CLOUDFLARE_ACCOUNT_ID: e71be5efb76a6c54f78f008da4404f00
   GHCR_REGISTRY: ghcr.io
   GHCR_USERNAME: ${{ secrets.GHCR_USERNAME }}
   GHCR_PASSWORD: ${{ secrets.GHCR_TOKEN }}
   INTERNAL_SERVICE_TOKEN: ${{ secrets.INTERNAL_SERVICE_TOKEN }}
+  CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+  CLOUDFLARE_DNS_API_TOKEN: ${{ secrets.CLOUDFLARE_DNS_API_TOKEN }}
 
 jobs:
   prep:
@@ -107,8 +113,6 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     needs: prep
-    env:
-      CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_DNS_API_TOKEN }}
     outputs:
       image_ref: ${{ needs.prep.outputs.image_ref }}
       image_tag: ${{ needs.prep.outputs.image_tag }}
@@ -190,6 +194,16 @@ jobs:
             -e "GHCR_USERNAME=${GHCR_USERNAME}"
             -e "GHCR_PASSWORD=${GHCR_PASSWORD}"
             -e "INTERNAL_SERVICE_TOKEN=${INTERNAL_SERVICE_TOKEN}"
+            -e "ACCOUNT_SERVICE_URL=${ACCOUNT_SERVICE_URL}"
+            -e "PRIMARY_DOMAIN=${PRIMARY_DOMAIN}"
+            -e "SECONDARY_DOMAIN=${SECONDARY_DOMAIN}"
+            -e "NEXT_PUBLIC_RUNTIME_ENVIRONMENT=${NEXT_PUBLIC_RUNTIME_ENVIRONMENT}"
+            -e "NEXT_PUBLIC_RUNTIME_REGION=${NEXT_PUBLIC_RUNTIME_REGION}"
+            -e "CLOUDFLARE_ZONE_TAG=${CLOUDFLARE_ZONE_TAG}"
+            -e "CLOUDFLARE_WEB_ANALYTICS_SITE_TAG=${CLOUDFLARE_WEB_ANALYTICS_SITE_TAG}"
+            -e "CLOUDFLARE_ACCOUNT_ID=${CLOUDFLARE_ACCOUNT_ID}"
+            -e "CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN}"
+            -e "CLOUDFLARE_DNS_API_TOKEN=${CLOUDFLARE_DNS_API_TOKEN}"
           )
 
           if [[ "${RUN_APPLY}" != "true" ]]; then