🚀 Auto-PR: Merge test → main

.github/workflows/deploy-beta.yml

@@ -42,6 +42,8 @@ on:
         required: true
       VITE_ENCRYPTION_SECRET:
         required: true
+      OPENAI_API_KEY:
+        required: false
 
 jobs:
   deploy:
@@ -78,6 +80,7 @@ jobs:
           BETA_KEYCLOAK_ADMIN_PASSWORD: ${{ secrets.BETA_KEYCLOAK_ADMIN_PASSWORD }}
           BETA_KEYCLOAK_ADMIN_CLIENT_SECRET: ${{ secrets.BETA_KEYCLOAK_ADMIN_CLIENT_SECRET }}
           VITE_ENCRYPTION_SECRET: ${{ secrets.VITE_ENCRYPTION_SECRET }}
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
         run: |
           echo "🚀 Deploying Beta v${{ inputs.app_version }} to VPS (Docker Compose)..."
 
@@ -95,13 +98,24 @@ jobs:
             fi
           "
 
+          # Clean up unused Docker resources to prevent disk-full failures
+          ${SSH_CMD} "
+            echo '🧹 Cleaning up unused Docker resources...'
+            docker image prune -af --filter 'until=168h' 2>/dev/null || true
+            docker container prune -f 2>/dev/null || true
+            docker volume prune -f 2>/dev/null || true
+            docker builder prune -af --keep-storage=2gb 2>/dev/null || true
+            echo \"📊 Disk usage: \$(df -h / | tail -1 | awk '{print \$5}') used\"
+          "
+
           # Write env file from CI secrets (printf runs on CI, piped to VPS via SSH)
           printf '%s\n' \
             "POSTGRES_PASSWORD=${BETA_POSTGRES_PASSWORD}" \
             "KC_DB_PASSWORD=${BETA_POSTGRES_PASSWORD}" \
             "KEYCLOAK_ADMIN_PASSWORD=${BETA_KEYCLOAK_ADMIN_PASSWORD}" \
             "KEYCLOAK_ADMIN_CLIENT_SECRET=${BETA_KEYCLOAK_ADMIN_CLIENT_SECRET}" \
             "VITE_ENCRYPTION_SECRET=${VITE_ENCRYPTION_SECRET}" \
+            "OPENAI_API_KEY=${OPENAI_API_KEY}" \
           | ${SSH_CMD} "cat > ${DEPLOY_DIR}/.env.beta && chmod 600 ${DEPLOY_DIR}/.env.beta"
 
           # Pull latest code and rebuild containers

.github/workflows/deployment-strategy.yml

@@ -58,6 +58,8 @@ on:
         required: false
       BETA_KEYCLOAK_ADMIN_CLIENT_SECRET:
         required: false
+      OPENAI_API_KEY:
+        required: false
 
 jobs:
   deploy-beta:
@@ -75,6 +77,7 @@ jobs:
       BETA_KEYCLOAK_ADMIN_PASSWORD: ${{ secrets.BETA_KEYCLOAK_ADMIN_PASSWORD }}
       BETA_KEYCLOAK_ADMIN_CLIENT_SECRET: ${{ secrets.BETA_KEYCLOAK_ADMIN_CLIENT_SECRET }}
       VITE_ENCRYPTION_SECRET: ${{ secrets.VITE_ENCRYPTION_SECRET }}
+      OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
 
   deploy-production:
     name: Deploy Production (Azure/AWS)