From 33040a487bc9e739621cc2363623bd7820482af3 Mon Sep 17 00:00:00 2001
From: Timothy Kim <timothykim@fastmail.fm>
Date: Fri, 13 Mar 2026 17:12:30 -0400
Subject: [PATCH] pass SSH_ORIGINAL_COMMAND as argument to deploy.sh in
 authorized_keys

sudo strips environment variables, so SSH_ORIGINAL_COMMAND wasn't
reaching deploy.sh. Pass it explicitly as a shell argument instead.
---
 setup.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/setup.sh b/setup.sh
index ef256d1..574c6fb 100755
--- a/setup.sh
+++ b/setup.sh
@@ -84,7 +84,7 @@ mkdir -p /home/deploy/.ssh
 chmod 700 /home/deploy/.ssh
 if [ ! -f /home/deploy/.ssh/authorized_keys ]; then
     echo "WARNING: Add the CI public key manually:"
-    echo '  command="sudo /opt/hantim/scripts/deploy.sh",no-port-forwarding,no-agent-forwarding,no-X11-forwarding,no-pty ssh-ed25519 <KEY>'
+    echo '  command="sudo /opt/hantim/scripts/deploy.sh $SSH_ORIGINAL_COMMAND",no-port-forwarding,no-agent-forwarding,no-X11-forwarding,no-pty ssh-ed25519 <KEY>'
     echo "  into /home/deploy/.ssh/authorized_keys"
 fi
 chown -R deploy:deploy /home/deploy/.ssh