fix(pipeline): restore run directive in deploy.yml

.gitea/workflows/deploy.yml

@@ -231,13 +231,31 @@ jobs:
           GATEKEEPER_HOST: gatekeeper.${{ needs.prepare.outputs.traefik_host }}
           ENV_FILE: ${{ needs.prepare.outputs.env_file }}
         run: |
+          # Middleware & Auth Logic
+          LOG_LEVEL=$( [[ "$TARGET" == "testing" || "$TARGET" == "development" ]] && echo "debug" || echo "info" )
+          STD_MW="${PROJECT_NAME}-forward,compress"
+
+          if [[ "$TARGET" == "production" ]]; then
+            AUTH_MIDDLEWARE="$STD_MW"
+            COMPOSE_PROFILES=""
+          else
+            # Order: Forward (Proto) -> Auth -> Compression
+            AUTH_MIDDLEWARE="${PROJECT_NAME}-forward,${PROJECT_NAME}-auth,compress"
+            COMPOSE_PROFILES="gatekeeper"
+          fi
+
+          # Gatekeeper Origin
+          GATEKEEPER_ORIGIN="$NEXT_PUBLIC_BASE_URL/gatekeeper"
+
           # Generate Environment File
           cat > .env.deploy << EOF
           # Generated by CI - $TARGET
           IMAGE_TAG=$IMAGE_TAG
           NEXT_PUBLIC_BASE_URL=$NEXT_PUBLIC_BASE_URL
+          GATEKEEPER_ORIGIN=$GATEKEEPER_ORIGIN
           SENTRY_DSN=$SENTRY_DSN
           PROJECT_COLOR=$PROJECT_COLOR
+          LOG_LEVEL=$LOG_LEVEL
 
           # Directus
           DIRECTUS_URL=$DIRECTUS_URL
@@ -276,12 +294,10 @@ jobs:
           ENV_FILE=$ENV_FILE
           TRAEFIK_RULE='$TRAEFIK_RULE'
           TRAEFIK_HOST='$TRAEFIK_HOST'
-          GATEKEEPER_HOST='$GATEKEEPER_HOST'
+          COMPOSE_PROFILES=$COMPOSE_PROFILES
+          AUTH_MIDDLEWARE=$AUTH_MIDDLEWARE
           EOF
 
-          # AUTH_MIDDLEWARE logic
-          printf "AUTH_MIDDLEWARE=%s\n" "$( [[ "$TARGET" == "production" ]] && echo "compress" || echo "${PROJECT_NAME}-auth,compress" )" >> .env.deploy
-
       - name: 🚀 SSH Deploy
         shell: bash
         env: