hantim/hantim-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use vars.DEPLOY_HOST instead of secrets since hostname is not sensitive

Browse Source
This commit is contained in:
Timothy Kim
2026-03-15 21:49:29 -04:00
parent 5dd2343d4a
commit b96e94afa6
4 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/deploy-nginx.yml
+1 -1
View File
@@ -15,4 +15,4 @@ jobs:
mkdir -p ~/.ssh
echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/deploy_key
chmod 600 ~/.ssh/deploy_key
ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key deploy@${{ secrets.DEPLOY_HOST }} deploy-nginx
ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key deploy@${{ vars.DEPLOY_HOST }} deploy-nginx
.gitea/workflows/deploy-timothykim.yml
+1 -1
View File
@@ -15,4 +15,4 @@ jobs:
mkdir -p ~/.ssh
echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/deploy_key
chmod 600 ~/.ssh/deploy_key
ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key deploy@${{ secrets.DEPLOY_HOST }} deploy-timothykim.net
ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key deploy@${{ vars.DEPLOY_HOST }} deploy-timothykim.net
README.md
+5 -2
View File
@@ -84,9 +84,12 @@ After running the script:
Nginx Proxy Manager certs and Let's Encrypt account keys are encrypted with
git-crypt (see `.gitattributes`). You need the git-crypt key to unlock them.
The following secrets must be configured in the `hantim` Gitea org settings
(Settings > Actions > Secrets) and are shared across all repos:
The following must be configured in the `hantim` Gitea org settings and are
shared across all repos:
Variables (Settings > Actions > Variables):
- `DEPLOY_HOST` -- the server's IP or hostname
Secrets (Settings > Actions > Secrets):
- `DEPLOY_SSH_KEY` -- the SSH private key for the `deploy` user
- `REGISTRY_TOKEN` -- Gitea personal access token for Docker registry login
scripts/new-app.sh
+1 -1
View File
@@ -56,7 +56,7 @@ jobs:
mkdir -p ~/.ssh
echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/deploy_key
chmod 600 ~/.ssh/deploy_key
ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key deploy@${{ secrets.DEPLOY_HOST }} deploy-APP_PLACEHOLDER
ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key deploy@${{ vars.DEPLOY_HOST }} deploy-APP_PLACEHOLDER
OUTER
sed -i "s/APP_PLACEHOLDER/$APP/g" "$REPO_ROOT/.gitea/workflows/deploy-$APP.yml"