Update deploy.yml

.forgejo/workflows/deploy.yml

@@ -64,15 +64,23 @@ jobs:
         # container via `docker cp` (tar stream) — NOT bind mounts, because
         # the workspace lives in the job container's overlay, not on the DinD
         # daemon's host filesystem (bind sources resolve daemon-side).
+        env:
+          NOMAD_ADDR_HOST: ${{ vars.NOMAD_ADDR_HOST }}
+          NOMAD_TOKEN: ${{ secrets.NOMAD_TOKEN }}
+          NOMAD_CACERT: ${{ secrets.NOMAD_CACERT }}
         run: |
+          [ -n "$NOMAD_ADDR_HOST" ] || { echo "NOMAD_ADDR_HOST variable is empty"; exit 1; }
+          [ -n "$NOMAD_TOKEN" ]     || { echo "NOMAD_TOKEN secret is empty"; exit 1; }
+          [ -n "$NOMAD_CACERT" ]    || { echo "NOMAD_CACERT secret is empty"; exit 1; }
+
           mkdir -p .ci-tls
-          printf '%s\n' "${{ secrets.NOMAD_CACERT }}" > .ci-tls/ca.crt
+          printf '%s\n' "$NOMAD_CACERT" > .ci-tls/ca.crt
 
           docker create --name nomad-deploy \
             -e IMAGE_TAG="${{ github.sha }}" \
-            -e NOMAD_ADDR="https://${{ vars.NOMAD_ADDR_HOST }}:4646" \
+            -e NOMAD_ADDR="https://$NOMAD_ADDR_HOST:4646" \
             -e NOMAD_CACERT=/tmp/ca.crt \
-            -e NOMAD_TOKEN="${{ secrets.NOMAD_TOKEN }}" \
+            -e NOMAD_TOKEN="$NOMAD_TOKEN" \
             --entrypoint /bin/nomad \
             hashicorp/nomad:1.9 job run /tmp/job.hcl