From 92a7e6e2377527d7f364b76b26d4ac4c272639ad Mon Sep 17 00:00:00 2001
From: bes-r <27369668+bes-r@users.noreply.github.com>
Date: Wed, 8 Jul 2026 22:01:23 +0200
Subject: [PATCH] ssh deploy: fail-fast (BatchMode + ConnectTimeout)

---
 .forgejo/workflows/dev.yaml     | 2 +-
 .forgejo/workflows/release.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/dev.yaml b/.forgejo/workflows/dev.yaml
index 13ff843..cea8df5 100644
--- a/.forgejo/workflows/dev.yaml
+++ b/.forgejo/workflows/dev.yaml
@@ -45,7 +45,7 @@ jobs:
         run: |
           echo "${{ secrets.TEST_SSH_KEY }}" > deploy_key
           chmod 600 deploy_key
-          ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null \
+          ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o BatchMode=yes -o ConnectTimeout=15 \
             -i deploy_key ${{ secrets.TEST_USER }}@${{ secrets.TEST_HOST }} \
             "set -e && cd ${{ secrets.TEST_DEPLOY_PATH }} && echo '${{ secrets.REGISTRY_TOKEN }}' | docker login ${{ vars.REGISTRY }} -u '${{ secrets.REGISTRY_USER }}' --password-stdin && sed -i 's|^IMAGE=.*|IMAGE=${{ steps.meta.outputs.dev_tag }}|' .env && docker compose -f compose.deploy.yaml pull app && docker compose -f compose.deploy.yaml up -d && docker image prune -f"
           rm -f deploy_key
diff --git a/.forgejo/workflows/release.yaml b/.forgejo/workflows/release.yaml
index 55e7351..e161a39 100644
--- a/.forgejo/workflows/release.yaml
+++ b/.forgejo/workflows/release.yaml
@@ -45,7 +45,7 @@ jobs:
         run: |
           echo "${{ secrets.PROD_SSH_KEY }}" > deploy_key
           chmod 600 deploy_key
-          ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null \
+          ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o BatchMode=yes -o ConnectTimeout=15 \
             -i deploy_key ${{ secrets.PROD_USER }}@${{ secrets.PROD_HOST }} \
             "set -e && cd ${{ secrets.PROD_DEPLOY_PATH }} && echo '${{ secrets.REGISTRY_TOKEN }}' | docker login ${{ vars.REGISTRY }} -u '${{ secrets.REGISTRY_USER }}' --password-stdin && sed -i 's|^IMAGE=.*|IMAGE=${{ steps.meta.outputs.version_tag }}|' .env && docker compose -f compose.deploy.yaml pull app && docker compose -f compose.deploy.yaml up -d && docker image prune -f"
           rm -f deploy_key