From 35db587a0d7f750f732c54fe1826e6c0fead9641 Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Wed, 4 Mar 2026 15:57:45 +0100
Subject: [PATCH] fix(ci): fix heredoc variable expansion for SSH docker login

---
 .gitea/workflows/deploy.yml | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 0a4cd375..96b6310b 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -398,12 +398,14 @@ jobs:
           scp docker-compose.yml root@alpha.mintel.me:$SITE_DIR/docker-compose.yml
           
           # Execute remote commands
+          TOKEN_VALUE="$REGISTRY_PASS"
+          USER_VALUE="$REGISTRY_USER"
           ssh root@alpha.mintel.me bash <<DEPLOYEOF
           set -e
-          cd $SITE_DIR
-          printf '%s' '$REGISTRY_PASS' | docker login git.infra.mintel.me -u '$REGISTRY_USER' --password-stdin
-          docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file '$ENV_FILE' pull
-          docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file '$ENV_FILE' up -d --remove-orphans
+          cd ${SITE_DIR}
+          printf '%s' "${TOKEN_VALUE}" | docker login git.infra.mintel.me -u "${USER_VALUE}" --password-stdin
+          docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file '${ENV_FILE}' pull
+          docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file '${ENV_FILE}' up -d --remove-orphans
           DEPLOYEOF
           
           # Sanitize Payload Migrations: Replace 'dev' push entries with proper migration names.