From 667832a5856a4252dd9af13c3dae6db6ce880402 Mon Sep 17 00:00:00 2001
From: alboped <shi_zhaojun@aliyun.com>
Date: Tue, 28 Apr 2026 02:56:21 +0800
Subject: [PATCH] =?UTF-8?q?chore(deploy):=20=E5=B0=86=20DEPLOY=5FDOCKER=5F?=
 =?UTF-8?q?ENV=20=E5=88=87=E6=8D=A2=E4=B8=BA=20secrets?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

部署流程写入运行时 .env 时改用 secrets.DEPLOY_DOCKER_ENV，降低敏感配置在变量与日志中的暴露风险。

Made-with: Cursor
---
 .gitea/workflows/deploy.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 2c9c6e5..2439b3d 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -53,7 +53,7 @@ jobs:
 
         mkdir -p deploy/docker
         cat > deploy/docker/.env <<EOT
-        ${{ vars.DEPLOY_DOCKER_ENV }}
+        ${{ secrets.DEPLOY_DOCKER_ENV }}
         IMAGE_REPO=${IMAGE_REPO}
         IMAGE_TAG=${IMAGE_TAG}
         EOT