From dd38570c7bcb71bbd22ee3b1a355776f5d4ef627 Mon Sep 17 00:00:00 2001
From: DevOps <devops@noveria.net>
Date: Sun, 21 Jun 2026 21:39:50 +0200
Subject: [PATCH] fix: read OWNER_PASSWORD via docker instead of direct
 filesystem

---
 .gitea/workflows/deploy-now.yaml | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/.gitea/workflows/deploy-now.yaml b/.gitea/workflows/deploy-now.yaml
index a9e0fff..4f6b731 100644
--- a/.gitea/workflows/deploy-now.yaml
+++ b/.gitea/workflows/deploy-now.yaml
@@ -43,10 +43,7 @@ jobs:
       - name: Prepare .env
         run: |
           set -euo pipefail
-          HOST_OWNER_PASSWORD=""
-          if [ -f "${DEPLOY_PATH}/.env" ]; then
-            HOST_OWNER_PASSWORD=$(grep '^OWNER_PASSWORD=' "${DEPLOY_PATH}/.env" | cut -d= -f2- || true)
-          fi
+          HOST_OWNER_PASSWORD=$(docker run --rm -v "${DEPLOY_PATH}:/host-deploy:ro" alpine:latest sh -c "grep '^OWNER_PASSWORD=' /host-deploy/.env | cut -d= -f2-" 2>/dev/null || true)
           if [ -z "${HOST_OWNER_PASSWORD}" ]; then
             echo "ERROR: OWNER_PASSWORD not found in ${DEPLOY_PATH}/.env"
             exit 1