From be722068b59604eb1f350ea1f9cbe1c8539070cb Mon Sep 17 00:00:00 2001
From: kyy <b24053@hanmaceng.co.kr>
Date: Wed, 21 Jan 2026 16:34:12 +0900
Subject: [PATCH] =?UTF-8?q?envsubst=20=ED=95=98=EA=B8=B0=20=EC=A0=84?=
 =?UTF-8?q?=EC=97=90=20.env=20=EB=A1=9C=EB=93=9C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/production_release.yml | 19 ++++++++++++++++---
 1 file changed, 16 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/production_release.yml b/.gitea/workflows/production_release.yml
index 47bcb6ec..aaebc75d 100644
--- a/.gitea/workflows/production_release.yml
+++ b/.gitea/workflows/production_release.yml
@@ -76,6 +76,17 @@ jobs:
           HARBOR_ROBOT_KEY: ${{ secrets.HARBOR_ROBOT_KEY }}
         run: |
           set -euo pipefail
+
+          echo "DEBUG: PROD_USER='${PROD_USER}'"
+          echo "DEBUG: PROD_HOST='${PROD_HOST}'"
+          echo "DEBUG: DEPLOY_PATH='${DEPLOY_PATH}'"
+
+          # Sanity check (fail fast with a clear message)
+          if [ -z "${PROD_USER}" ] || [ -z "${PROD_HOST}" ] || [ -z "${DEPLOY_PATH}" ]; then
+            echo "::error::Missing required vars (PROD_USER/PROD_HOST/DEPLOY_PATH). Check Gitea repo variables."
+            exit 1
+          fi
+
           ssh-keyscan -H "${PROD_HOST}" >> ~/.ssh/known_hosts
 
           ssh "${PROD_USER}@${PROD_HOST}" "mkdir -p '${DEPLOY_PATH}'"
@@ -88,7 +99,7 @@ jobs:
             "DB_PORT=${{ vars.PROD_DB_PORT }}" \
             "CLICKHOUSE_PORT_HTTP=${{ vars.PROD_CLICKHOUSE_PORT_HTTP }}" \
             "CLICKHOUSE_PORT_NATIVE=${{ vars.PROD_CLICKHOUSE_PORT_NATIVE }}" \
-            "CLICKHOUSE_USER=${{ vars.PROD_CLICKHOUSE_USER }}" \ 
+            "CLICKHOUSE_USER=${{ vars.PROD_CLICKHOUSE_USER }}" \
             "CLICKHOUSE_PASSWORD=${{ secrets.PROD_CLICKHOUSE_PASSWORD }}" \
             "BACKEND_PORT=${{ vars.PROD_BACKEND_PORT }}" \
             "FRONTEND_PORT=${{ vars.PROD_FRONTEND_PORT }}" \
@@ -126,8 +137,10 @@ jobs:
              export HARBOR_ROBOT_ACCOUNT='${HARBOR_ROBOT_ACCOUNT}'; \
              set -e; \
              cd \"\${DEPLOY_PATH}\"; \
-             read HARBOR_ROBOT_KEY_FROM_STDIN; \
-             echo \"\${HARBOR_ROBOT_KEY_FROM_STDIN}\" | docker login \"\${HARBOR_ENDPOINT}\" -u \"\${HARBOR_ROBOT_ACCOUNT}\" --password-stdin; \
+             docker login \"\${HARBOR_ENDPOINT}\" -u \"\${HARBOR_ROBOT_ACCOUNT}\" --password-stdin; \
+             set -a; \
+             . ./.env; \
+             set +a; \
              envsubst < docker-compose.template.yaml > docker-compose.yml; \
              docker compose -f compose.infra.yml -f docker-compose.yml pull; \
              docker compose -f compose.infra.yml -f docker-compose.yml up -d --remove-orphans"