From 91aa9af6ae1ad0a3aba912363c00bd66470e14f5 Mon Sep 17 00:00:00 2001
From: Andrew Rioux <rioux.d.andrew@gmail.com>
Date: Sun, 19 Oct 2025 23:47:35 -0400
Subject: [PATCH] fix: use full path and check before shredding

---
 .gitea/workflows/deploy.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 138f817..113abcb 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -10,7 +10,7 @@ jobs:
 
       - name: Build article code
         run: |
-          nix-build -A articles
+          /run/current-system/sw/bin/nix-build -A articles
 
       - name: Deploy article HTML
         run: |
@@ -18,10 +18,10 @@ jobs:
           ${{ secrets.DEPLOY_SSH_KEY }}
           EOD
 
-          nix-shell -p rsync openssh --run \
+          /run/current-system/sw/bin/nix-shell -p rsync openssh --run \
             'rsync -avz -e "ssh -oStrictHostKeyChecking=accept-new -i ssh-key" result/* deploy@andrew.riouxs.co:/srv/site'
 
       - name: Remove SSH key
         if: always()
         run: |
-          shred ssh-key
+          test -f ssh-key && shred ssh-key