CI: VPS_IP/DEV_VPS_IP переносит из secrets в vars

IP control-plane сервера сам по себе не секрет (не даёт доступа), просто
не хочется палить его без причины — vars в приватном репо видны так же,
как код, но не маскируются в логах и не write-only, как secrets.
Настоящие секреты (SSH-ключи, GHCR_TOKEN) не тронуты.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
2026-07-09 16:35:46 +07:00
parent 379f2a26cf
commit ebc618743a
2 changed files with 6 additions and 6 deletions
+3 -3
View File
@@ -38,7 +38,7 @@ jobs:
- name: Sync compose file to Dev VPS
uses: appleboy/scp-action@v0.1.7
with:
host: ${{ secrets.DEV_VPS_IP }}
host: ${{ vars.DEV_VPS_IP }}
username: root
key: ${{ secrets.DEV_SSH_PRIVATE_KEY }}
source: "docker-compose.dev-remote.yml,Caddyfile.dev"
@@ -48,7 +48,7 @@ jobs:
- name: Remote deploy via SSH
uses: appleboy/ssh-action@v1
with:
host: ${{ secrets.DEV_VPS_IP }}
host: ${{ vars.DEV_VPS_IP }}
username: root
key: ${{ secrets.DEV_SSH_PRIVATE_KEY }}
script: |
@@ -76,7 +76,7 @@ jobs:
- name: Remote deploy via SSH
uses: appleboy/ssh-action@v1
with:
host: ${{ secrets.VPS_IP }}
host: ${{ vars.VPS_IP }}
username: root
key: ${{ secrets.SSH_PRIVATE_KEY }}
script: |
+3 -3
View File
@@ -32,7 +32,7 @@ jobs:
- name: Sync compose file to Dev VPS
uses: appleboy/scp-action@v0.1.7
with:
host: ${{ secrets.DEV_VPS_IP }}
host: ${{ vars.DEV_VPS_IP }}
username: root
key: ${{ secrets.DEV_SSH_PRIVATE_KEY }}
source: "docker-compose.dev-remote.yml,Caddyfile.dev"
@@ -42,7 +42,7 @@ jobs:
- name: Remote deploy via SSH
uses: appleboy/ssh-action@v1
with:
host: ${{ secrets.DEV_VPS_IP }}
host: ${{ vars.DEV_VPS_IP }}
username: root
key: ${{ secrets.DEV_SSH_PRIVATE_KEY }}
script: |
@@ -70,7 +70,7 @@ jobs:
- name: Remote deploy via SSH
uses: appleboy/ssh-action@v1
with:
host: ${{ secrets.VPS_IP }}
host: ${{ vars.VPS_IP }}
username: root
key: ${{ secrets.SSH_PRIVATE_KEY }}
script: |