From 46166a3bb4a80592c64cdca135e1f9fbbb7eef81 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sun, 12 Apr 2026 00:22:45 +0000
Subject: [PATCH] =?UTF-8?q?refactor:=20=E7=A7=BB=E9=99=A4=E5=86=97?=
 =?UTF-8?q?=E4=BD=99BARE=E5=8F=98=E9=87=8F=EF=BC=8C=E7=9B=B4=E6=8E=A5?=
 =?UTF-8?q?=E4=BD=BF=E7=94=A8BARE=5FDOMAIN?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/80e337de-dabe-4e86-a711-62d4c47762ec

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
---
 .github/workflows/deploy-cn-landing.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/deploy-cn-landing.yml b/.github/workflows/deploy-cn-landing.yml
index 74191b10..e7c32cef 100644
--- a/.github/workflows/deploy-cn-landing.yml
+++ b/.github/workflows/deploy-cn-landing.yml
@@ -207,12 +207,11 @@ jobs:
           # ─── SSL自动注入: 检测已有Let's Encrypt证书 ───
           # 如果之前运行过 setup-ssl，证书文件会存在
           # 每次deploy都重新注入SSL配置，避免模板覆盖导致SSL丢失
-          BARE="${BARE_DOMAIN}"
-          if [ -d "/etc/letsencrypt/live/\${BARE}" ] && [ -f "/etc/letsencrypt/live/\${BARE}/fullchain.pem" ]; then
+          if [ -d "/etc/letsencrypt/live/${BARE_DOMAIN}" ] && [ -f "/etc/letsencrypt/live/${BARE_DOMAIN}/fullchain.pem" ]; then
             echo ""
             echo "§2.5 🔐 检测到SSL证书，注入HTTPS配置..."
             # 在 listen 80 后添加 listen 443 ssl 和证书配置
-            sudo sed -i '/listen 80 default_server;/a\\n    listen 443 ssl default_server;\n    ssl_certificate /etc/letsencrypt/live/'"\${BARE}"'/fullchain.pem;\n    ssl_certificate_key /etc/letsencrypt/live/'"\${BARE}"'/privkey.pem;\n    include /etc/letsencrypt/options-ssl-nginx.conf;\n    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;' \
+            sudo sed -i '/listen 80 default_server;/a\\n    listen 443 ssl default_server;\n    ssl_certificate /etc/letsencrypt/live/'"${BARE_DOMAIN}"'/fullchain.pem;\n    ssl_certificate_key /etc/letsencrypt/live/'"${BARE_DOMAIN}"'/privkey.pem;\n    include /etc/letsencrypt/options-ssl-nginx.conf;\n    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;' \
               /etc/nginx/sites-available/cn-domain.conf
             echo "✅ SSL配置已注入 · HTTPS已启用"
           else