From eaf9ad80b5a01603b0481c94a1bd6670556ac6e7 Mon Sep 17 00:00:00 2001
From: Jean-Luc Makiola <business@jeanlucmakiola.de>
Date: Wed, 8 Apr 2026 22:28:44 +0200
Subject: [PATCH] ci: use Coolify API with auth token for deploy trigger

Replace simple webhook GET with authenticated POST to Coolify deploy API.
Requires COOLIFY_TOKEN secret in Gitea with deploy permissions.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 .gitea/workflows/ci.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 558e9f2..7a9bac1 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -55,7 +55,10 @@ jobs:
 
       - name: Trigger Coolify deploy
         run: |
-          curl -s -X GET "${{ secrets.COOLIFY_WEBHOOK }}"
+          curl -s -X POST "https://coolify.jeanlucmakiola.de/api/v1/deploy" \
+            -H "Authorization: Bearer ${{ secrets.COOLIFY_TOKEN }}" \
+            -H "Content-Type: application/json" \
+            -d '{"uuid":"al88s5bflnej3m6h1rmr8ylq"}'
 
   e2e:
     if: false  # E2E tests need rewrite: auth moved from local login to OIDC (Logto). Tests still expect username/password flow.