From ae9a2e17c1e506b984401d2c170551e895eb2eaf Mon Sep 17 00:00:00 2001
From: felegy <felegy@hvg.hu>
Date: Fri, 22 Aug 2025 12:50:17 +0000
Subject: [PATCH] + ADD ssh deploy key

---
 .github/workflows/cicd.yaml | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/cicd.yaml b/.github/workflows/cicd.yaml
index 13a7943..0f6bb2f 100644
--- a/.github/workflows/cicd.yaml
+++ b/.github/workflows/cicd.yaml
@@ -10,8 +10,18 @@ jobs:
     - uses: actions/checkout@v3
       with:
         fetch-depth: 0
+    - name: Setup cloudflared
+      uses: AnimMouse/setup-cloudflared@v2
+    - name: Configure ssh
+      run: |
+        mkdir -p ~/.ssh
+        chmod 700 ~/.ssh
+        tee ~/.ssh/config <<EOF
+        Host ssh-git.saito.systems
+          ProxyCommand cloudflared access ssh --hostname %h
+        EOF
     - uses: yesolutions/mirror-action@master
       with:
         REMOTE: ${{ secrets.DEPLOY_REPO_URL }}
-        GIT_USERNAME: ${{ secrets.DEPLOY_REPO_USERNAME }}
-        GIT_PASSWORD: ${{ secrets.DEPLOY_REPO_TOKEN }}
+        GIT_SSH_PRIVATE_KEY: ${{ secrets.DEPLOY_SSH_KEY }}
+        GIT_SSH_NO_VERIFY_HOST: "true"