From e05b236aa54277e85381134bab9c4a8f4966e387 Mon Sep 17 00:00:00 2001
From: miczek <miczek.r@gmail.com>
Date: Thu, 15 Oct 2026 05:05:13 +0300
Subject: [PATCH] ci: escape registry vars inside remote deploy heredoc

Drone also blanks ${SECRET} in the <<'EOS' body before SSH; $$ so
the Pi shell expands the exported login env.
---
 .drone.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.drone.yml b/.drone.yml
index 571e3bc..b1a9cab 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -135,7 +135,7 @@ steps:
           "$${SSH_USER}@$${SSH_HOST}" \
           "export REGISTRY_USERNAME='$${REGISTRY_USERNAME}' REGISTRY_PASSWORD='$${REGISTRY_PASSWORD}'; bash -s" <<'EOS'
         set -euo pipefail
-        echo "${REGISTRY_PASSWORD}" | docker login registry.zea.lt -u "${REGISTRY_USERNAME}" --password-stdin
+        echo "$${REGISTRY_PASSWORD}" | docker login registry.zea.lt -u "$${REGISTRY_USERNAME}" --password-stdin
         cd /home/miczek/homelab/tracker
         docker compose pull
         docker compose up -d --remove-orphans