From 204979456e4a67d61ddc121f04463d5c15c8b44e Mon Sep 17 00:00:00 2001 From: febux Date: Mon, 14 Sep 2026 02:01:27 +0300 Subject: [PATCH] Update deploy.yml --- .forgejo/workflows/deploy.yml | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml index dc44862..37e9e0c 100644 --- a/.forgejo/workflows/deploy.yml +++ b/.forgejo/workflows/deploy.yml @@ -64,15 +64,23 @@ jobs: # container via `docker cp` (tar stream) — NOT bind mounts, because # the workspace lives in the job container's overlay, not on the DinD # daemon's host filesystem (bind sources resolve daemon-side). + env: + NOMAD_ADDR_HOST: ${{ vars.NOMAD_ADDR_HOST }} + NOMAD_TOKEN: ${{ secrets.NOMAD_TOKEN }} + NOMAD_CACERT: ${{ secrets.NOMAD_CACERT }} run: | + [ -n "$NOMAD_ADDR_HOST" ] || { echo "NOMAD_ADDR_HOST variable is empty"; exit 1; } + [ -n "$NOMAD_TOKEN" ] || { echo "NOMAD_TOKEN secret is empty"; exit 1; } + [ -n "$NOMAD_CACERT" ] || { echo "NOMAD_CACERT secret is empty"; exit 1; } + mkdir -p .ci-tls - printf '%s\n' "${{ secrets.NOMAD_CACERT }}" > .ci-tls/ca.crt + printf '%s\n' "$NOMAD_CACERT" > .ci-tls/ca.crt docker create --name nomad-deploy \ -e IMAGE_TAG="${{ github.sha }}" \ - -e NOMAD_ADDR="https://${{ vars.NOMAD_ADDR_HOST }}:4646" \ + -e NOMAD_ADDR="https://$NOMAD_ADDR_HOST:4646" \ -e NOMAD_CACERT=/tmp/ca.crt \ - -e NOMAD_TOKEN="${{ secrets.NOMAD_TOKEN }}" \ + -e NOMAD_TOKEN="$NOMAD_TOKEN" \ --entrypoint /bin/nomad \ hashicorp/nomad:1.9 job run /tmp/job.hcl