From 1510eceb0f54f470fc96adbb3fc8f54b0c97ef1d Mon Sep 17 00:00:00 2001 From: sanasol Date: Fri, 20 Feb 2026 11:35:53 +0100 Subject: [PATCH] Hide direct upload IP in repository secret Move FORGEJO_UPLOAD URL from hardcoded value to ${{ secrets.FORGEJO_UPLOAD_URL }} to avoid exposing server IP when repo goes public. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1336f5e..82340eb 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -9,8 +9,8 @@ on: env: # Domain for small API calls (goes through Cloudflare - fine for <100MB) FORGEJO_API: https://git.sanhost.net/api/v1 - # Direct to Forgejo port (bypasses Cloudflare + Traefik for large uploads) - FORGEJO_UPLOAD: http://208.69.78.130:3001/api/v1 + # Direct upload URL (bypasses Cloudflare for large files) - set in repo secrets + FORGEJO_UPLOAD: ${{ secrets.FORGEJO_UPLOAD_URL }} jobs: create-release: