From 74f040fa501d71b89f9f063cc63e64ca6a3fb11c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Joe=20K=C3=BCng?= <joekueng05@gmail.com>
Date: Thu, 29 Jan 2026 22:07:53 +0100
Subject: [PATCH] fix: cicdl.yaml

---
 .gitea/workflows/cicd.yaml | 21 ++++++++++-----------
 1 file changed, 10 insertions(+), 11 deletions(-)

diff --git a/.gitea/workflows/cicd.yaml b/.gitea/workflows/cicd.yaml
index a6cda3d..22adccb 100644
--- a/.gitea/workflows/cicd.yaml
+++ b/.gitea/workflows/cicd.yaml
@@ -96,20 +96,19 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
-
-          # Assicura ssh client
+          
           apt-get update
-          apt-get install -y --no-install-recommends openssh-client
-
+          apt-get install -y --no-install-recommends openssh-client ca-certificates
+          
           mkdir -p ~/.ssh
           chmod 700 ~/.ssh
-
-          # Scrive la chiave privata (multi-line) dal secret
-          printf '%s' "${{ secrets.SSH_PRIVATE_KEY }}" | tr -d '\r' > ~/.ssh/id_ed25519
+          
+          printf '%s' "${{ secrets.SSH_PRIVATE_KEY_B64 }}" | base64 -d > ~/.ssh/id_ed25519
           chmod 600 ~/.ssh/id_ed25519
-
-          # Aggiunge l'host key (evita prompt interattivi)
+          
+          # Debug sicuro: stampa solo la prima riga (non rivela la chiave)
+          head -n 1 ~/.ssh/id_ed25519
+          
           ssh-keyscan -H "${{ secrets.SERVER_HOST }}" >> ~/.ssh/known_hosts 2>/dev/null
-
-          # Invia SOLO "prod/int/dev" come comando (finisce in SSH_ORIGINAL_COMMAND sul server)
+          
           ssh -i ~/.ssh/id_ed25519 -o BatchMode=yes "${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}" "${{ env.ENV }}"