From ebc618743a2d1a50c33e660084dbc3e69a292a23 Mon Sep 17 00:00:00 2001 From: nineap Date: Thu, 9 Jul 2026 16:35:46 +0700 Subject: [PATCH] =?UTF-8?q?CI:=20VPS=5FIP/DEV=5FVPS=5FIP=20=D0=BF=D0=B5?= =?UTF-8?q?=D1=80=D0=B5=D0=BD=D0=BE=D1=81=D0=B8=D1=82=20=D0=B8=D0=B7=20sec?= =?UTF-8?q?rets=20=D0=B2=20vars?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit IP control-plane сервера сам по себе не секрет (не даёт доступа), просто не хочется палить его без причины — vars в приватном репо видны так же, как код, но не маскируются в логах и не write-only, как secrets. Настоящие секреты (SSH-ключи, GHCR_TOKEN) не тронуты. Co-Authored-By: Claude Sonnet 5 --- .gitea/workflows/deploy.yml | 6 +++--- .github/workflows/deploy.yml | 6 +++--- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml index 0200bbb..d3974cc 100644 --- a/.gitea/workflows/deploy.yml +++ b/.gitea/workflows/deploy.yml @@ -38,7 +38,7 @@ jobs: - name: Sync compose file to Dev VPS uses: appleboy/scp-action@v0.1.7 with: - host: ${{ secrets.DEV_VPS_IP }} + host: ${{ vars.DEV_VPS_IP }} username: root key: ${{ secrets.DEV_SSH_PRIVATE_KEY }} source: "docker-compose.dev-remote.yml,Caddyfile.dev" @@ -48,7 +48,7 @@ jobs: - name: Remote deploy via SSH uses: appleboy/ssh-action@v1 with: - host: ${{ secrets.DEV_VPS_IP }} + host: ${{ vars.DEV_VPS_IP }} username: root key: ${{ secrets.DEV_SSH_PRIVATE_KEY }} script: | @@ -76,7 +76,7 @@ jobs: - name: Remote deploy via SSH uses: appleboy/ssh-action@v1 with: - host: ${{ secrets.VPS_IP }} + host: ${{ vars.VPS_IP }} username: root key: ${{ secrets.SSH_PRIVATE_KEY }} script: | diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 8165f33..c547018 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -32,7 +32,7 @@ jobs: - name: Sync compose file to Dev VPS uses: appleboy/scp-action@v0.1.7 with: - host: ${{ secrets.DEV_VPS_IP }} + host: ${{ vars.DEV_VPS_IP }} username: root key: ${{ secrets.DEV_SSH_PRIVATE_KEY }} source: "docker-compose.dev-remote.yml,Caddyfile.dev" @@ -42,7 +42,7 @@ jobs: - name: Remote deploy via SSH uses: appleboy/ssh-action@v1 with: - host: ${{ secrets.DEV_VPS_IP }} + host: ${{ vars.DEV_VPS_IP }} username: root key: ${{ secrets.DEV_SSH_PRIVATE_KEY }} script: | @@ -70,7 +70,7 @@ jobs: - name: Remote deploy via SSH uses: appleboy/ssh-action@v1 with: - host: ${{ secrets.VPS_IP }} + host: ${{ vars.VPS_IP }} username: root key: ${{ secrets.SSH_PRIVATE_KEY }} script: |