Hide direct upload IP in repository secret

Move FORGEJO_UPLOAD URL from hardcoded value to ${{ secrets.FORGEJO_UPLOAD_URL }}
to avoid exposing server IP when repo goes public.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
sanasol
2026-02-20 11:35:53 +01:00
parent c4b5368538
commit 1510eceb0f

View File

@@ -9,8 +9,8 @@ on:
env: env:
# Domain for small API calls (goes through Cloudflare - fine for <100MB) # Domain for small API calls (goes through Cloudflare - fine for <100MB)
FORGEJO_API: https://git.sanhost.net/api/v1 FORGEJO_API: https://git.sanhost.net/api/v1
# Direct to Forgejo port (bypasses Cloudflare + Traefik for large uploads) # Direct upload URL (bypasses Cloudflare for large files) - set in repo secrets
FORGEJO_UPLOAD: http://208.69.78.130:3001/api/v1 FORGEJO_UPLOAD: ${{ secrets.FORGEJO_UPLOAD_URL }}
jobs: jobs:
create-release: create-release: