moment of truth

.forgejo/workflows/push-prod.yaml

@@ -34,14 +34,16 @@ jobs:
 
       - name: Copy to production server
         run: |
-          mkdir -p ~/.ssh/
-          export REMOTE=${{ secrets.SSH_USER }}@{{ secrets.SSH_HOST }}
+          export REMOTE=${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}
           export PORT=${{ secrets.SSH_PORT }}
-          echo "${{ secrets.SSH_PRIVATE_KEY }}" > 
-          scp -P ${{ secrets.SSH_PORT }} ./$EXEC.tar.gz $REMOTE:~/
-          ssh -o StrictHostKeyChecking=no $REMOTE -p $PORT << EOF
+          ssh-keyscan -p $PORT $REMOTE >> ~/.ssh/known_hosts
+          scp -P $PORT ./$EXEC.tar.gz $REMOTE:~/
+
+      - name: Restart production
+        run: |
+          ssh -o StrictHostKeyChecking=no $REMOTE -p $PORT << EOT
             cd ${{ secrets.DEPLOY_DIR }}
             tar xzf ~/$EXEC.tar.gz"
             echo "restart" > ./deploy.sock
-          EOF
+          EOT