fix(ci): fix shell compatibility and scp order in deployment workflow

.gitea/workflows/deploy.yml

@@ -322,6 +322,7 @@ jobs:
           fetch-depth: 1
 
       - name: 🚀 Deploy to ${{ env.TARGET }}
+        shell: bash
         run: |
           echo "Deploying $TARGET → $IMAGE_TAG"
 
@@ -368,6 +369,19 @@ jobs:
           AUTH_MIDDLEWARE=$( [[ "$TARGET" == "production" ]] && echo "compress" || echo "${PROJECT_NAME}-auth,compress" )
           EOF
 
+          # 1. Cleanup and Create Directories on server BEFORE SCP
+          ssh -o StrictHostKeyChecking=accept-new root@alpha.mintel.me bash << 'EOF'
+            set -e
+            mkdir -p /home/deploy/sites/klz-cables.com/varnish
+            mkdir -p /home/deploy/sites/klz-cables.com/directus/uploads /home/deploy/sites/klz-cables.com/directus/extensions
+            if [ -d "/home/deploy/sites/klz-cables.com/varnish/default.vcl" ]; then
+              echo "🧹 Removing directory 'varnish/default.vcl' created by Docker..."
+              rm -rf /home/deploy/sites/klz-cables.com/varnish/default.vcl
+            fi
+            chown -R deploy:deploy /home/deploy/sites/klz-cables.com/directus /home/deploy/sites/klz-cables.com/varnish
+          EOF
+
+          # 2. Transfer files
           scp -o StrictHostKeyChecking=accept-new /tmp/klz-cables.env root@alpha.mintel.me:/home/deploy/sites/klz-cables.com/$ENV_FILE
           scp -o StrictHostKeyChecking=accept-new docker-compose.yml root@alpha.mintel.me:/home/deploy/sites/klz-cables.com/docker-compose.yml
           scp -r -o StrictHostKeyChecking=accept-new varnish root@alpha.mintel.me:/home/deploy/sites/klz-cables.com/
@@ -378,16 +392,6 @@ jobs:
             chmod 600 "$ENV_FILE"
             chown deploy:deploy "$ENV_FILE"
 
-            # Ensure standard directories exist and have correct permissions
-            mkdir -p directus/uploads directus/extensions
-            chown -R deploy:deploy varnish directus
-
-            # Cleanup if Docker created a directory instead of mounting a file
-            if [ -d "varnish/default.vcl" ]; then
-              echo "🧹 Removing directory 'varnish/default.vcl' created by Docker..."
-              rm -rf varnish/default.vcl
-            fi
-
             echo "${{ secrets.REGISTRY_PASS }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin
             echo "→ Pulling image: $IMAGE_TAG"
             docker compose -p "$PROJECT_NAME" --env-file "$ENV_FILE" pull