From 87faff525cd455302993231b1a37485886137e5a Mon Sep 17 00:00:00 2001 From: JosueDev-afk Date: Mon, 1 Jun 2026 22:38:17 -0600 Subject: [PATCH] ci: use base64-encoded SSH key to preserve newlines --- .gitea/workflows/deploy-qa.yml | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/.gitea/workflows/deploy-qa.yml b/.gitea/workflows/deploy-qa.yml index 158dd72..49b68a7 100644 --- a/.gitea/workflows/deploy-qa.yml +++ b/.gitea/workflows/deploy-qa.yml @@ -55,16 +55,13 @@ jobs: needs: build-and-push steps: - name: Deploy via SSH - env: - DEPLOY_SSH_KEY: ${{ secrets.DEPLOY_SSH_KEY }} - DEPLOY_PASSPHRASE: ${{ secrets.DEPLOY_PASSPHRASE }} run: | set -euo pipefail IMAGE_TAG="${{ needs.build-and-push.outputs.image_tag }}" - printf '%s\n' "$DEPLOY_SSH_KEY" > /tmp/deploy_key + echo "${{ secrets.DEPLOY_SSH_KEY_B64 }}" | base64 -d > /tmp/deploy_key chmod 600 /tmp/deploy_key - printf '%s\n' "$DEPLOY_PASSPHRASE" > /tmp/passphrase + echo "${{ secrets.DEPLOY_PASSPHRASE }}" > /tmp/passphrase sudo apt-get update -qq && sudo apt-get install -y -qq sshpass