svemagie.net/indiekit-blog
1
0
Fork 0
Code Issues Actions 1 Packages Projects Releases Activity

fix: use jexec env to pass vars into node jail for syndication webhook
Build & Deploy / build-and-deploy (push) Failing after 2m9s
Details

Browse Source
This commit is contained in:
Sven
2026-05-14 20:37:12 +02:00
parent 5c0f756d41
commit 668f7fa51a
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/deploy.yml
+2 -4
View File
@@ -197,9 +197,7 @@ jobs:
SECRET: ${{ secrets.SECRET }} SECRET: ${{ secrets.SECRET }}
SITE_URL: ${{ secrets.SITE_URL }} SITE_URL: ${{ secrets.SITE_URL }}
run: | run: |
# syndicate-webhook.sh lives at /usr/local/indiekit/ inside the node jail (persistent path). # bastille cmd does not forward env vars — use jexec with explicit env.
# jsonwebtoken is only available there, not on the runner.
ssh -p 222 -i ~/.ssh/id_rsa -o StrictHostKeyChecking=no \ ssh -p 222 -i ~/.ssh/id_rsa -o StrictHostKeyChecking=no \
${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }} \ ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }} \
"SECRET='$SECRET' SITE_URL='$SITE_URL' \ "doas jexec node env SECRET='$SECRET' SITE_URL='$SITE_URL' sh /usr/local/indiekit/syndicate-webhook.sh"
doas bastille cmd node sh /usr/local/indiekit/syndicate-webhook.sh"