build: try fix EOF

.github/workflows/deploy.yml

@@ -67,23 +67,33 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Deploy via systemd trigger
-        run: |
-          SERVICE="${{ needs.build-and-push.outputs.repo_slug }}"
-          ENV="${{ needs.build-and-push.outputs.deploy_env }}"
-          IMAGE="${{ needs.build-and-push.outputs.image }}"
-          
-          REMOTE_ROOT="${{ secrets.WINSOMNIA_INFRA_ROOT }}"
-          REMOTE_PATH="$REMOTE_ROOT/$SERVICE/$ENV"
-          
-          ssh ${{ secrets.WINSOMNIA_DEPLOY_USER }}@${{ secrets.WINSOMNIA_DEPLOY_HOST }} <<EOF
-            set -e
-          
-            echo "[CI] Writing deploy request..."
-            cat > "$REMOTE_PATH/data/.deploy_req" <<REQ
-            IMAGE=$IMAGE
-            REQ
-          
-            echo "[CI] Triggering deploy via systemd..."
-            sudo /bin/systemctl start winsomnia-deploy@${SERVICE}-${ENV}.service
-            EOF
+    - name: Add deploy SSH key
+      run: |
+        mkdir -p ~/.ssh
+        echo "${{ secrets.WINSOMNIA_DEPLOY_KEY }}" > ~/.ssh/id_ed25519
+        chmod 600 ~/.ssh/id_ed25519
+
+    - name: Add host key
+      run: |
+        ssh-keyscan -H ${{ secrets.WINSOMNIA_DEPLOY_HOST }} >> ~/.ssh/known_hosts
+
+    - name: Deploy via systemd trigger
+      run: |
+        SERVICE="${{ needs.build-and-push.outputs.repo_slug }}"
+        ENV="${{ needs.build-and-push.outputs.deploy_env }}"
+        IMAGE="${{ needs.build-and-push.outputs.image }}"
+        
+        REMOTE_ROOT="${{ secrets.WINSOMNIA_INFRA_ROOT }}"
+        REMOTE_PATH="$REMOTE_ROOT/$SERVICE/$ENV"
+        
+        ssh ${{ secrets.WINSOMNIA_DEPLOY_USER }}@${{ secrets.WINSOMNIA_DEPLOY_HOST }} <<'EOF'
+        set -e
+        
+        echo "[CI] Writing deploy request..."
+        cat > "$REMOTE_PATH/data/.deploy_req" <<REQ
+        IMAGE='"$IMAGE"'
+        REQ
+        
+        echo "[CI] Triggering deploy via systemd..."
+        sudo /bin/systemctl start winsomnia-deploy@'"$SERVICE"'-'"$ENV"'.service
+        EOF