From cd3562babb894dd4bbc3ebfea47d2b87eed823d8 Mon Sep 17 00:00:00 2001
From: Ryan Kegel <ryan.kegel@gmail.com>
Date: Tue, 27 Oct 2026 15:44:41 -0400
Subject: [PATCH] feat: add validation for production SSH credentials in
 deployment workflow

---
 .gitea/workflows/promote-master.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.gitea/workflows/promote-master.yaml b/.gitea/workflows/promote-master.yaml
index d553eb5..2186c03 100644
--- a/.gitea/workflows/promote-master.yaml
+++ b/.gitea/workflows/promote-master.yaml
@@ -353,6 +353,15 @@ jobs:
               exit 1
             fi
 
+            # Validate that MONGO_URI is present (falling back to previous .env if available)
+            if [ -z "${{ secrets.MONGO_URI }}" ]; then
+                echo "ERROR: MONGO_URI secret is missing or empty in Gitea repository secrets."
+                exit 1
+              fi
+            else
+              echo "MONGO_URI successfully loaded from Gitea secrets."
+            fi
+
             cat > .env << EOF
             FRONTEND_URL=${{ secrets.PROD_FRONTEND_URL }}
             BACKEND_HOST_PORT=${{ secrets.PROD_BACKEND_HOST_PORT }}