From e6f216a63de1213ba0b98d9e2411222ea6c4c94b Mon Sep 17 00:00:00 2001
From: miczek <miczek.r@gmail.com>
Date: Thu, 15 Oct 2026 05:05:48 +0300
Subject: [PATCH] ci: fix Drone parse error from empty ${} in comment

---
 .drone.yml | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/.drone.yml b/.drone.yml
index 3453a02..cd02f18 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -164,20 +164,19 @@ steps:
       - apk add --no-cache openssh-client
       - mkdir -p /root/.ssh && chmod 700 /root/.ssh
       - printenv SSH_KEY > /root/.ssh/id_ed25519 && chmod 600 /root/.ssh/id_ed25519
-      # Drone pre-expands ${VAR} (empty for secrets). Use $$ so the shell
-      # reads the from_secret environment at runtime. DRONE_* stay as ${}.
+      # Escape secrets as $$… so Drone does not pre-expand them to empty.
       - |
         ssh -i /root/.ssh/id_ed25519 \
-          -p "$${SSH_PORT:-22}" \
+          -p "$$SSH_PORT" \
           -o StrictHostKeyChecking=accept-new \
           -o BatchMode=yes \
-          "$${SSH_USER}@$${SSH_HOST}" \
-          "export DRONE_COMMIT_SHA='${DRONE_COMMIT_SHA}' REGISTRY_USERNAME='$${REGISTRY_USERNAME}' REGISTRY_PASSWORD='$${REGISTRY_PASSWORD}'; bash -s" <<'EOS'
+          "$$SSH_USER@$$SSH_HOST" \
+          "export DRONE_COMMIT_SHA='${DRONE_COMMIT_SHA}' REGISTRY_USERNAME='$$REGISTRY_USERNAME' REGISTRY_PASSWORD='$$REGISTRY_PASSWORD'; bash -s" <<'EOS'
         set -euo pipefail
         cd /opt/iled-shop
         git fetch origin
-        git checkout "$${DRONE_COMMIT_SHA}"
-        echo "$${REGISTRY_PASSWORD}" | docker login registry.zea.lt -u "$${REGISTRY_USERNAME}" --password-stdin
+        git checkout "$$DRONE_COMMIT_SHA"
+        echo "$$REGISTRY_PASSWORD" | docker login registry.zea.lt -u "$$REGISTRY_USERNAME" --password-stdin
         cd docker
         docker compose pull
         docker compose up -d --remove-orphans