.forgejo/workflows/build.yaml

@@ -8,8 +8,8 @@ jobs:
     runs-on: ubuntu-latest
     container:
       image: archlinux/archlinux:base-devel
-      privileged: true
-
+    permissions:
+      contents: read
     env:
       Desktop: "template"
     steps:
@@ -17,9 +17,9 @@ jobs:
         run: pacman -Sy --noconfirm nodejs npm git sudo
       - name: Checkout code
         uses: actions/checkout@v4
-      - name: Update system
+      - name: update 
         run: pacman -Syyuu --noconfirm
-      - name: Check user
+      - name: whoami
         run: whoami
       - name: Build ISO
         run: |
@@ -40,11 +40,7 @@ jobs:
           else
             echo "REMOTE_DIR=/srv/http/${{ env.Desktop }}/" >> $GITHUB_ENV
           fi
-
       - name: Deploy files
-        env:
-          PASS: ${{ secrets.PASS }}
-          HOST: ${{ secrets.HOST }}
         run: |
-          sshpass -p "$PASS" ssh -o StrictHostKeyChecking=no parch@$HOST "rm -rf $REMOTE_DIR && mkdir -p $REMOTE_DIR"
-          sshpass -p "$PASS" rsync -avz out/ParchLinux-${{ env.Desktop }}-latest.iso out/md5sum.txt parch@$HOST:$REMOTE_DIR
+          sshpass -p "${{ secrets.SSHPASS }}" ssh -o StrictHostKeyChecking=no parch@${{ secrets.SSHHOST }} "rm -rf ${{ env.REMOTE_DIR }} && mkdir -p ${{ env.REMOTE_DIR }}"
+          sshpass -p "${{ secrets.SSHPASS }}" rsync -avz out/ParchLinux-${{ env.Desktop }}-latest.iso out/md5sum.txt parch@${{ secrets.SSHHOST }}:${{ env.REMOTE_DIR }}