document deploy host key variable in readme

2026-03-20 16:31:54 -04:00
parent 7daf7a267b
commit 16ea39811d
1 changed files with 7 additions and 0 deletions
@@ -211,5 +211,12 @@ Stored in the `hantim` Gitea org for direct use in CI workflows:
 | Name | Type | Purpose |
 |---|---|---|
 | `DEPLOY_HOST` | Variable | Server IP or hostname |
+| `DEPLOY_HOST_KEY` | Variable | Server SSH host public key (for host key pinning) |
 | `DEPLOY_SSH_KEY` | Secret | SSH private key for the deploy user |
 | `CI_REGISTRY_TOKEN` | Secret | Gitea token for Docker registry login |
+
+After reprovisioning hantim (new host key), update `DEPLOY_HOST_KEY`:
+
+```bash
+ssh-keyscan -t ed25519 hantim.net 2>/dev/null
+```