mmintel/klz-cables.com
1
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity

fix(ci): use heredoc for SSH docker login to avoid token escaping issues

Browse Source
This commit is contained in:
Marc Mintel
2026-03-04 15:47:04 +01:00
parent 6729d53c78
commit 8162a8b1cb
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
.gitea/workflows/deploy.yml
View File

@@ -438,7 +438,13 @@ jobs:
scp docker-compose.yml root@alpha.mintel.me:$SITE_DIR/docker-compose.yml
# Execute remote commands
ssh root@alpha.mintel.me "cd $SITE_DIR && echo \"$REGISTRY_PASS\" | docker login git.infra.mintel.me -u \"$REGISTRY_USER\" --password-stdin && docker compose -p \"${{ needs.prepare.outputs.project_name }}\" --env-file \"$ENV_FILE\" pull && docker compose -p \"${{ needs.prepare.outputs.project_name }}\" --env-file \"$ENV_FILE\" up -d --remove-orphans"
ssh root@alpha.mintel.me bash <<DEPLOYEOF
set -e
cd $SITE_DIR
printf '%s' '$REGISTRY_PASS' | docker login git.infra.mintel.me -u '$REGISTRY_USER' --password-stdin
docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file '$ENV_FILE' pull
docker compose -p '${{ needs.prepare.outputs.project_name }}' --env-file '$ENV_FILE' up -d --remove-orphans
DEPLOYEOF
# Sanitize Payload Migrations: Replace 'dev' push entries with proper migration names.
# Without this, Payload prompts interactively for confirmation and blocks forever in Docker.