fix(ci): hardcode fixed env values, only keep sensitive vars as secrets

.gitea/workflows/build.yml

@@ -53,24 +53,21 @@ jobs:
         run: |
           apk add --no-cache openssh-client
 
-          # Installer la clé privée dans /tmp (filesystem accessible en écriture)
           echo "${{ secrets.SSH_PRIVATE_KEY }}" > /tmp/id_ed25519
           chmod 600 /tmp/id_ed25519
-          ssh-keygen -l -f /tmp/id_ed25519
 
           SSH="ssh -i /tmp/id_ed25519 -o StrictHostKeyChecking=no -o ConnectTimeout=10 -o BatchMode=yes Stude12@192.168.1.39"
 
           # Copier docker-compose.prod.yml
           cat docker-compose.prod.yml | $SSH "mkdir -p /volume1/docker/adam-acs && cat > /volume1/docker/adam-acs/docker-compose.prod.yml"
 
-          # Créer le .env sur le NAS
+          # Créer le .env sur le NAS (valeurs fixes + secrets sensibles uniquement)
           $SSH "cat > /volume1/docker/adam-acs/.env" <<EOF
           APP_KEY=${{ secrets.APP_KEY }}
-          APP_URL=${{ secrets.APP_URL }}
-          APP_PORT=${{ secrets.APP_PORT }}
+          APP_URL=https://adam-acs.stude12-ugreen.ddns.net
+          APP_PORT=8080
           LOG_LEVEL=info
-          HASH_KEY=${{ secrets.HASH_KEY }}
-          WEBUI_USERNAME=${{ secrets.WEBUI_USERNAME }}
+          WEBUI_USERNAME=Admin
           WEBUI_PASSWORD=${{ secrets.WEBUI_PASSWORD }}
           API_KEY=${{ secrets.API_KEY }}
           EOF

docker-compose.prod.yml

@@ -3,19 +3,19 @@ services:
     image: 192.168.1.39:3000/stude12/adam-acs:latest
     restart: unless-stopped
     ports:
-      - "${APP_PORT:-8080}:8080"
+      - "8080:8080"
     environment:
       NODE_ENV: production
       PORT: 8080
       HOST: 0.0.0.0
       MONGODB_URI: mongodb://admin:admin_password@databases-mongo-1:27017/adam-acs?authSource=admin
       MONGODB_DB_NAME: adam-acs
-      APP_KEY: ${APP_KEY}
-      APP_URL: ${APP_URL}
+      APP_URL: https://adam-acs.stude12-ugreen.ddns.net
       SESSION_DRIVER: cookie
-      LOG_LEVEL: ${LOG_LEVEL:-info}
-      HASH_KEY: ${HASH_KEY}
-      WEBUI_USERNAME: ${WEBUI_USERNAME:-Admin}
+      LOG_LEVEL: info
+      WEBUI_USERNAME: Admin
+      # Secrets injectés via .env
+      APP_KEY: ${APP_KEY}
       WEBUI_PASSWORD: ${WEBUI_PASSWORD}
       API_KEY: ${API_KEY}
     volumes: