fix(ops): pass temp env via compose --env-file

.gitea/workflows/deploy.yaml

@@ -234,7 +234,7 @@ jobs:
 
           docker run --rm \
             -v "${DEPLOY_PATH}:/workspace/nexus" \
-            -v "${ENV_TMPFILE}:/workspace/nexus/.env:ro" \
+            -v "${ENV_TMPFILE}:/tmp/nexus-deploy-env:ro" \
             -v /var/run/docker.sock:/var/run/docker.sock \
             -w /workspace/nexus \
             docker:cli \
@@ -242,12 +242,12 @@ jobs:
               set -e
               if [ -n '${SERVICE_ARG}' ]; then
                 echo '🚀 Deploying service: ${SERVICE_ARG}'
-                docker compose build ${BUILD_ARGS} ${SERVICE_ARG}
-                docker compose up -d --wait --force-recreate ${SERVICE_ARG}
+                docker compose --env-file /tmp/nexus-deploy-env build ${BUILD_ARGS} ${SERVICE_ARG}
+                docker compose --env-file /tmp/nexus-deploy-env up -d --wait --force-recreate ${SERVICE_ARG}
               else
                 echo '🚀 Deploying all services'
-                docker compose build ${BUILD_ARGS}
-                docker compose up -d --wait --force-recreate
+                docker compose --env-file /tmp/nexus-deploy-env build ${BUILD_ARGS}
+                docker compose --env-file /tmp/nexus-deploy-env up -d --wait --force-recreate
               fi
             "
 

.gitea/workflows/rollback.yaml

@@ -151,15 +151,15 @@ jobs:
 
           docker run --rm \
             -v "${DEPLOY_PATH}:/workspace/nexus" \
-            -v "${ENV_TMPFILE}:/workspace/nexus/.env:ro" \
+            -v "${ENV_TMPFILE}:/tmp/nexus-deploy-env:ro" \
             -v /var/run/docker.sock:/var/run/docker.sock \
             -w /workspace/nexus \
             docker:cli \
             sh -c "
               set -e
               echo '🔙 Rolling back to ${{ inputs.target_tag }}'
-              docker compose build --no-cache
-              docker compose up -d --wait --force-recreate
+              docker compose --env-file /tmp/nexus-deploy-env build --no-cache
+              docker compose --env-file /tmp/nexus-deploy-env up -d --wait --force-recreate
             "
 
           echo "✅ Rollback redeploy completed"