From a13074902b9a865eed2b3a873a86821813d60443 Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Fri, 27 Feb 2026 00:03:31 +0100
Subject: [PATCH] fix(ci): escape backticks in TRAEFIK_RULE to prevent bash
 command substitution

---
 .gitea/workflows/deploy.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index a4c7f730..137a8301 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -86,12 +86,12 @@ jobs:
             TRAEFIK_HOST="${SLUG}.branch.mintel.me"
           fi
 
-          # Standardize Traefik Rule
+          # Standardize Traefik Rule (escaped backticks for Traefik v3)
           if [[ "$TRAEFIK_HOST" == *","* ]]; then
-            TRAEFIK_RULE=$(echo "$TRAEFIK_HOST" | sed 's/,/ /g' | awk '{for(i=1;i<=NF;i++) printf "Host(`%s`)%s", $i, (i==NF?"":" || ")}')
+            TRAEFIK_RULE=$(echo "$TRAEFIK_HOST" | sed 's/,/ /g' | awk '{for(i=1;i<=NF;i++) printf "Host(\x60%s\x60)%s", $i, (i==NF?"":" || ")}')
             PRIMARY_HOST=$(echo "$TRAEFIK_HOST" | cut -d',' -f1 | sed 's/ //g')
           else
-            TRAEFIK_RULE="Host(`$TRAEFIK_HOST`)"
+            TRAEFIK_RULE='Host(`'"$TRAEFIK_HOST"'`)'
             PRIMARY_HOST="$TRAEFIK_HOST"
           fi