move to centralized secret

.gitea/workflows/deploy.yml

@@ -79,23 +79,9 @@ jobs:
         # coverage data into a single report. It combines the environment variables
         # needed for both test suites.
         env:
-          # --- Database credentials for both test suites ---
-          DB_HOST: ${{ secrets.DB_HOST }}
-          DB_PORT: ${{ secrets.DB_PORT }}
-          DB_USER: ${{ secrets.DB_USER }}
-          DB_PASSWORD: ${{ secrets.DB_PASSWORD }}
-          DB_DATABASE: "flyer-crawler-test"
-          DB_NAME: "flyer-crawler-test"
-          
           # --- Integration test specific variables ---
-          JWT_SECRET: "test-secret-for-ci"
-          GOOGLE_CLIENT_ID: "dummy_client_id"
-          GOOGLE_CLIENT_SECRET: "dummy_client_secret"
-          GITHUB_CLIENT_ID: "dummy_github_id"
-          GITHUB_CLIENT_SECRET: "dummy_github_secret"
           FRONTEND_URL: "http://localhost:3000"
           VITE_API_BASE_URL: "http://localhost:3001/api"
-          GEMINI_API_KEY: ${{ secrets.VITE_GOOGLE_GENAI_API_KEY }}
 
           # --- Increase Node.js memory limit to prevent heap out of memory errors ---
           # This is crucial for memory-intensive tasks like running tests and coverage.
@@ -261,7 +247,7 @@ jobs:
 
           # 1. Copy the backend source code and project files first.
           # CRITICAL: We exclude '.env', 'node_modules', '.git', 'dist', and now 'flyer-images' to protect user content.
-          rsync -avz --delete --exclude '.env' --exclude 'node_modules' --exclude '.git' --exclude 'dist' --exclude 'flyer-images' ./ "$APP_PATH/"
+          rsync -avz --delete --exclude '.env' --exclude '.env.test' --exclude 'node_modules' --exclude '.git' --exclude 'dist' --exclude 'flyer-images' ./ "$APP_PATH/"
 
           # 2. Copy the built frontend assets into the same directory.
           # This will correctly place index.html and the assets/ folder in the webroot.