From b26bc9c34f281a25eba82eb7105954be32017e8f Mon Sep 17 00:00:00 2001
From: Markus Zimmerberger <zisco@zisco.at>
Date: Wed, 9 Sep 2026 19:57:34 +0200
Subject: [PATCH] Without ssh-workarounds

---
 .gitea/workflows/deploy.yml | 24 ++++++++----------------
 1 file changed, 8 insertions(+), 16 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 4751282..81832c2 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -4,9 +4,6 @@ on:
   push:
     branches: [main]
 
-env:
-  HOME: /root
-
 jobs:
   deploy:
     runs-on: ubuntu-latest
@@ -15,24 +12,19 @@ jobs:
         uses: actions/checkout@v4
 
       - name: rsync installieren
-        run: apt-get update && apt-get install -y rsync openssh-client
+        run: apt-get update && apt-get install -y rsync
 
-      - name: SSH-Key als Datei anlegen
-        run: |
-          mkdir -p /root/.ssh
-          printf '%s\n' "${{ secrets.PBT_DEPLOY_KEY }}" > /root/.ssh/pbt_deploy_key
-          chmod 600 /root/.ssh/pbt_deploy_key
-          ssh-keyscan -H pbt >> /root/.ssh/known_hosts
+      - name: SSH-Key laden
+        uses: webfactory/ssh-agent@v0.9.0
+        with:
+          ssh-private-key: ${{ secrets.PBT_DEPLOY_KEY }}
 
-      - name: Key-Inhalt verifizieren (Debug)
-        run: |
-          echo "Abgeleiteter Public Key aus dem geschriebenen Private Key:"
-          ssh-keygen -y -f /root/.ssh/pbt_deploy_key || echo "FEHLER: Datei ist kein gültiger Private Key"
+      - name: Host-Key vertrauen
+        run: ssh-keyscan -H pbt >> ~/.ssh/known_hosts
 
       - name: Dateien auf die pbt-LXC syncen
         run: |
           rsync -avz --delete \
-            -e "ssh -i /root/.ssh/pbt_deploy_key -o UserKnownHostsFile=/root/.ssh/known_hosts" \
             --exclude '.git' \
             --exclude '.gitea' \
             --exclude 'venv' \
@@ -41,7 +33,7 @@ jobs:
 
       - name: Abhängigkeiten installieren & Service neu starten
         run: |
-          ssh -i /root/.ssh/pbt_deploy_key -o UserKnownHostsFile=/root/.ssh/known_hosts deploy@pbt '
+          ssh deploy@pbt '
             set -e
             cd /opt/pbt
             python3 -m venv venv