From 3f63e84cd63d78c3acc89cd710164182ca672124 Mon Sep 17 00:00:00 2001 From: Sven Date: Tue, 31 Mar 2026 13:21:41 +0200 Subject: [PATCH] ci: use internal host IP 10.100.0.1 for SSH (hairpin NAT fix) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Runner is on the internal network — connecting to the public domain fails due to hairpin NAT, same as the syndication webhook. Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/deploy.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index ade55d7b..ce134db3 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -17,9 +17,9 @@ jobs: mkdir -p ~/.ssh printf '%s\n' "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa chmod 600 ~/.ssh/id_rsa - ssh-keyscan -p ${{ secrets.SSH_PORT }} ${{ secrets.SSH_HOST }} >> ~/.ssh/known_hosts 2>/dev/null + ssh-keyscan -p ${{ secrets.SSH_PORT }} 10.100.0.1 >> ~/.ssh/known_hosts 2>/dev/null - ssh -p ${{ secrets.SSH_PORT }} ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }} << SSHEOF + ssh -p ${{ secrets.SSH_PORT }} ${{ secrets.SSH_USER }}@10.100.0.1 << SSHEOF set -eu restart_log=/tmp/indiekit-restart.log