Fix GH secret use

abpvn · Dec 25, 2023 · 15f9d83 · 15f9d83
1 parent 7c5d7c6
commit 15f9d83
Showing 1 changed file with 12 additions and 6 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -1,8 +1,14 @@
+name: Deploy after push
+
 on:
     push:
       branches: [ "master" ]
     workflow_dispatch:
 
+env:
+  SSH_KEY_FILE_DIR: .keys
+  SSH_KEY_FILE_PATH: .keys/deploy_key.pem
+
 jobs:
     deploy:
         runs-on: ubuntu-latest
@@ -11,19 +17,19 @@ jobs:
 
             - name: Create deploy key file
               run: |
-                mkdir .keys
-                echo $SSH_DEPLOY_KEY > .keys/deploy_key.pem
-                chmod 600 .keys/deploy_key.pem
+                mkdir ${{env.SSH_KEY_FILE_DIR}}
+                echo ${{secrets.SSH_DEPLOY_KEY}} > ${{env.SSH_KEY_FILE_PATH}}
+                chmod 600  ${{env.SSH_KEY_FILE_PATH}}
 
             - name: Deploy to Main Server
               run: |
-                rsync -have "ssh -i .keys/deploy_key.pem" --exclude=".keys" . $SSH_DEPLOY_USER@$SSH_MAIN_HOST:$DEPLOY_PATH
+                rsync -have "ssh -i  ${{env.SSH_KEY_FILE_PATH}}" --exclude=".keys" . ${{secrets.SSH_DEPLOY_USER}}@${{secrets.SSH_MAIN_HOST}}:${{secrets.DEPLOY_PATH}}
             - name: Deploy to backup Server
               run: |
-                rsync -have "ssh -i .keys/deploy_key.pem" --exclude=".keys" . $SSH_DEPLOY_USER@$SSH_BACKUP_HOST:$DEPLOY_PATH
+                rsync -have "ssh -i  ${{env.SSH_KEY_FILE_PATH}}" --exclude=".keys" . ${{secrets.SSH_DEPLOY_USER}}@${{secrets.SSH_BACKUP_HOST}}:${{secrets.DEPLOY_PATH}}
 
             - name: Clean deply key file
               run: |
-                rm -rf .keys
+                rm -rf ${{env.SSH_KEY_FILE_DIR}}