moment of truth

.forgejo/workflows/push-prod.yaml

@@ -5,6 +5,8 @@ on:
 
 env:
   EXEC: arimelody-web
+  REMOTE: ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }}
+  PORT: ${{ secrets.SSH_PORT }}
 
 jobs:
   deploy:
@@ -34,14 +36,14 @@ jobs:
 
       - name: Copy to production server
         run: |
-          mkdir -p ~/.ssh/
-          export REMOTE=${{ secrets.SSH_USER }}@{{ secrets.SSH_HOST }}
-          export PORT=${{ secrets.SSH_PORT }}
-          echo "${{ secrets.SSH_PRIVATE_KEY }}" > 
-          scp -P ${{ secrets.SSH_PORT }} ./$EXEC.tar.gz $REMOTE:~/
-          ssh -o StrictHostKeyChecking=no $REMOTE -p $PORT << EOF
-            cd ${{ secrets.DEPLOY_DIR }}
-            tar xzf ~/$EXEC.tar.gz"
-            echo "restart" > ./deploy.sock
-          EOF
+          ssh-keyscan -p $PORT ${{ secrets.SSH_HOST }} >> ~/.ssh/known_hosts
+          scp -P $PORT ./$EXEC.tar.gz $REMOTE:~/
+
+      - name: Restart production
+        run: |
+          ssh -o StrictHostKeyChecking=no $REMOTE -p $PORT << EOT
+            cd ${{ secrets.DEPLOY_DIR }}
+            tar xzf ~/$EXEC.tar.gz
+            echo "restart" > ./deploy.sock
+          EOT