Monorepo for Aesthetic.Computer
aesthetic.computer
Validate lith deploy secret source
+9
+9
lith/deploy.fish
+9
lith/deploy.fish
···
27
27
exit 1
28
28
end
29
29
30
+
if not rg -q '^DEPLOY_SECRET=' $SERVICE_ENV
31
+
echo -e "$RED x DEPLOY_SECRET missing from $SERVICE_ENV$NC"
32
+
echo -e "$YELLOW lith reads this file via /opt/ac/system/.env on the server.$NC"
33
+
exit 1
34
+
end
35
+
30
36
# Test SSH connection
31
37
echo -e "$GREEN-> Testing SSH connection to $LITH_HOST...$NC"
32
38
if not ssh -i $SSH_KEY -o StrictHostKeyChecking=no -o ConnectTimeout=10 $LITH_USER@$LITH_HOST "echo ok" &>/dev/null
···
57
63
58
64
# Upload env
59
65
echo -e "$GREEN-> Uploading environment...$NC"
66
+
# Note: lith.service reads EnvironmentFile=/opt/ac/system/.env, so the
67
+
# canonical vault source lives at aesthetic-computer-vault/lith/.env and is
68
+
# uploaded into system/.env on the remote host.
60
69
scp -i $SSH_KEY $SERVICE_ENV $LITH_USER@$LITH_HOST:$REMOTE_DIR/system/.env
61
70
62
71
# Install deps