From 2ec208b7a20354c10c8357c1c96c4ec83c50b6bd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Murat=20=C3=96ZDEM=C4=B0R?= <muratozdemir@tarla.io>
Date: Wed, 10 Jun 2026 14:43:22 +0300
Subject: [PATCH] fix(ci): ensure vault_unseal_key placeholder exists before
 stack deploy

---
 .gitea/workflows/deploy-prod.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.gitea/workflows/deploy-prod.yml b/.gitea/workflows/deploy-prod.yml
index d34a3b4..58409f4 100644
--- a/.gitea/workflows/deploy-prod.yml
+++ b/.gitea/workflows/deploy-prod.yml
@@ -19,6 +19,11 @@ jobs:
       - name: Connect Runner to Overlay Network
         run: docker network connect iklimco-net $(hostname) || true
 
+      - name: Ensure vault_unseal_key placeholder exists
+        run: |
+          docker secret ls --format '{{.Name}}' | grep -q '^vault_unseal_key' || \
+            echo "bootstrap" | docker secret create vault_unseal_key -
+
       - name: Deploy Vault Stack
         run: |
           docker stack deploy \