From 198d77de8ae2cb20a83d4d601478e714a32ee6b1 Mon Sep 17 00:00:00 2001
From: continuist <continuist02@gmail.com>
Date: Sat, 20 Sep 2025 22:14:18 -0400
Subject: [PATCH] Prevent envsubst from replacing nginx variables

---
 .forgejo/workflows/ci.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 1ceea64..b8aad9f 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -249,8 +249,10 @@ jobs:
     - name: Render nginx.conf and write to host
       run: |
         set -euo pipefail
-        apk add --no-cache gettext >/dev/null
-        envsubst < nginx/nginx.conf > /tmp/nginx.conf
+        apk add --no-cache gettext >/dev/null  # envsubst
+        # Only substitute the vars we intend to: ${PROD_*_PORT}
+        envsubst '${PROD_FRONTEND_PORT} ${PROD_BACKEND_PORT}' < nginx/nginx.conf > /tmp/nginx.conf
+
         podman --remote run --rm -i \
           --userns=keep-id \
           -v /opt/sharenet/nginx:/host-nginx:rw \