From eccee4d3f1dbbbd1525e115191cfafec129d9a4a Mon Sep 17 00:00:00 2001
From: adam <adam@adbraun.lol>
Date: Tue, 29 Sep 2026 18:21:50 +0000
Subject: [PATCH] always remove the SSH key after a deploy

The clean up step was skipped whenever a transfer failed, leaving the
deploy key on the runner. Run it even when an earlier step fails.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .gitea/workflows/deploy.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index d4e52f1..bd565b0 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -31,4 +31,5 @@ jobs:
           scp -i ~/.ssh/id_rsa www/html/wordle/* ${{ vars.REMOTE_USER }}@${{ vars.REMOTE_SERVER }}:/var/www/html/wordle/
 
       - name: Clean up SSH key
+        if: always()  # remove the key even if a transfer failed
         run: rm -rf ~/.ssh