From db62354c97066c51dea75b92daf99e9a3faf634f Mon Sep 17 00:00:00 2001
From: Reviewer <reviewer@noveria.net>
Date: Sun, 14 Jun 2026 08:44:42 +0200
Subject: [PATCH] fix(ops): pass temp env via compose --env-file

---
 .gitea/workflows/deploy.yaml   | 10 +++++-----
 .gitea/workflows/rollback.yaml |  6 +++---
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 9edd83f..37e7f68 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -234,7 +234,7 @@ jobs:
 
           docker run --rm \
             -v "${DEPLOY_PATH}:/workspace/nexus" \
-            -v "${ENV_TMPFILE}:/workspace/nexus/.env:ro" \
+            -v "${ENV_TMPFILE}:/tmp/nexus-deploy-env:ro" \
             -v /var/run/docker.sock:/var/run/docker.sock \
             -w /workspace/nexus \
             docker:cli \
@@ -242,12 +242,12 @@ jobs:
               set -e
               if [ -n '${SERVICE_ARG}' ]; then
                 echo '🚀 Deploying service: ${SERVICE_ARG}'
-                docker compose build ${BUILD_ARGS} ${SERVICE_ARG}
-                docker compose up -d --wait --force-recreate ${SERVICE_ARG}
+                docker compose --env-file /tmp/nexus-deploy-env build ${BUILD_ARGS} ${SERVICE_ARG}
+                docker compose --env-file /tmp/nexus-deploy-env up -d --wait --force-recreate ${SERVICE_ARG}
               else
                 echo '🚀 Deploying all services'
-                docker compose build ${BUILD_ARGS}
-                docker compose up -d --wait --force-recreate
+                docker compose --env-file /tmp/nexus-deploy-env build ${BUILD_ARGS}
+                docker compose --env-file /tmp/nexus-deploy-env up -d --wait --force-recreate
               fi
             "
 
diff --git a/.gitea/workflows/rollback.yaml b/.gitea/workflows/rollback.yaml
index 82c587d..b14e001 100644
--- a/.gitea/workflows/rollback.yaml
+++ b/.gitea/workflows/rollback.yaml
@@ -151,15 +151,15 @@ jobs:
 
           docker run --rm \
             -v "${DEPLOY_PATH}:/workspace/nexus" \
-            -v "${ENV_TMPFILE}:/workspace/nexus/.env:ro" \
+            -v "${ENV_TMPFILE}:/tmp/nexus-deploy-env:ro" \
             -v /var/run/docker.sock:/var/run/docker.sock \
             -w /workspace/nexus \
             docker:cli \
             sh -c "
               set -e
               echo '🔙 Rolling back to ${{ inputs.target_tag }}'
-              docker compose build --no-cache
-              docker compose up -d --wait --force-recreate
+              docker compose --env-file /tmp/nexus-deploy-env build --no-cache
+              docker compose --env-file /tmp/nexus-deploy-env up -d --wait --force-recreate
             "
 
           echo "✅ Rollback redeploy completed"