From 6400453e9fba0290fb36adc9e46efa9ac2392fa9 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 11 Apr 2026 12:58:50 +0000
Subject: [PATCH] fix: use scp for LLM API keys injection to avoid heredoc
 variable expansion issue

Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/98e8a463-34d0-41db-a3b5-9f8c0a2d0366

Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
---
 .github/workflows/deploy-cn-landing.yml | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/deploy-cn-landing.yml b/.github/workflows/deploy-cn-landing.yml
index b78ab853..19b85f47 100644
--- a/.github/workflows/deploy-cn-landing.yml
+++ b/.github/workflows/deploy-cn-landing.yml
@@ -143,20 +143,19 @@ jobs:
           ZY_KIMI_API_KEY: ${{ secrets.ZY_KIMI_API_KEY }}
           ZY_QINGYAN_API_KEY: ${{ secrets.ZY_QINGYAN_API_KEY }}
         run: |
-          ssh cn-target << KEYS_CMD
-          set -e
-
-          # 写入LLM API密钥环境文件
-          cat > /opt/zhuyuan-cn/config/.env.llm << 'ENVEOF'
+          # 在本地生成密钥文件（变量在此展开）
+          cat > /tmp/.env.llm << ENVEOF
           ZY_DEEPSEEK_API_KEY=${ZY_DEEPSEEK_API_KEY}
           ZY_QIANWEN_API_KEY=${ZY_QIANWEN_API_KEY}
           ZY_KIMI_API_KEY=${ZY_KIMI_API_KEY}
           ZY_QINGYAN_API_KEY=${ZY_QINGYAN_API_KEY}
           ENVEOF
-          chmod 600 /opt/zhuyuan-cn/config/.env.llm
 
+          # 上传到目标服务器
+          scp -F ~/.ssh/config /tmp/.env.llm cn-target:/opt/zhuyuan-cn/config/.env.llm
+          ssh cn-target 'chmod 600 /opt/zhuyuan-cn/config/.env.llm'
+          rm -f /tmp/.env.llm
           echo "✅ 四大国内模型API密钥已注入"
-          KEYS_CMD
 
       - name: 🔧 启用Nginx配置 & 重载
         run: |