From e98bc5f0a3fb2cffa938d780ac1b46ed37932bc7 Mon Sep 17 00:00:00 2001
From: L HEREEC Kevin INNOV/PTFM <PGZM5392@orange.com>
Date: Mon, 13 Jul 2026 14:21:28 +0200
Subject: [PATCH] fix(ci): hardcode fixed env values, only keep sensitive vars
 as secrets

---
 .gitea/workflows/build.yml | 11 ++++-------
 docker-compose.prod.yml    | 12 ++++++------
 2 files changed, 10 insertions(+), 13 deletions(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 7a7f480..30f4de9 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -53,24 +53,21 @@ jobs:
         run: |
           apk add --no-cache openssh-client
 
-          # Installer la clé privée dans /tmp (filesystem accessible en écriture)
           echo "${{ secrets.SSH_PRIVATE_KEY }}" > /tmp/id_ed25519
           chmod 600 /tmp/id_ed25519
-          ssh-keygen -l -f /tmp/id_ed25519
 
           SSH="ssh -i /tmp/id_ed25519 -o StrictHostKeyChecking=no -o ConnectTimeout=10 -o BatchMode=yes Stude12@192.168.1.39"
 
           # Copier docker-compose.prod.yml
           cat docker-compose.prod.yml | $SSH "mkdir -p /volume1/docker/adam-acs && cat > /volume1/docker/adam-acs/docker-compose.prod.yml"
 
-          # Créer le .env sur le NAS
+          # Créer le .env sur le NAS (valeurs fixes + secrets sensibles uniquement)
           $SSH "cat > /volume1/docker/adam-acs/.env" <<EOF
           APP_KEY=${{ secrets.APP_KEY }}
-          APP_URL=${{ secrets.APP_URL }}
-          APP_PORT=${{ secrets.APP_PORT }}
+          APP_URL=https://adam-acs.stude12-ugreen.ddns.net
+          APP_PORT=8080
           LOG_LEVEL=info
-          HASH_KEY=${{ secrets.HASH_KEY }}
-          WEBUI_USERNAME=${{ secrets.WEBUI_USERNAME }}
+          WEBUI_USERNAME=Admin
           WEBUI_PASSWORD=${{ secrets.WEBUI_PASSWORD }}
           API_KEY=${{ secrets.API_KEY }}
           EOF
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index 799a129..fa5d41c 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -3,19 +3,19 @@ services:
     image: 192.168.1.39:3000/stude12/adam-acs:latest
     restart: unless-stopped
     ports:
-      - "${APP_PORT:-8080}:8080"
+      - "8080:8080"
     environment:
       NODE_ENV: production
       PORT: 8080
       HOST: 0.0.0.0
       MONGODB_URI: mongodb://admin:admin_password@databases-mongo-1:27017/adam-acs?authSource=admin
       MONGODB_DB_NAME: adam-acs
-      APP_KEY: ${APP_KEY}
-      APP_URL: ${APP_URL}
+      APP_URL: https://adam-acs.stude12-ugreen.ddns.net
       SESSION_DRIVER: cookie
-      LOG_LEVEL: ${LOG_LEVEL:-info}
-      HASH_KEY: ${HASH_KEY}
-      WEBUI_USERNAME: ${WEBUI_USERNAME:-Admin}
+      LOG_LEVEL: info
+      WEBUI_USERNAME: Admin
+      # Secrets injectés via .env
+      APP_KEY: ${APP_KEY}
       WEBUI_PASSWORD: ${WEBUI_PASSWORD}
       API_KEY: ${API_KEY}
     volumes: