syntax

.woodpecker.yml

@@ -108,14 +108,6 @@ steps:
       - bash
       - -c
       - |
-        cat <<EOSSH | ssh -T \
-        -o ProxyCommand="gcloud compute start-iap-tunnel aptiva-prod-vm 22 \
-             --project=aptivaai-prod --zone=us-central1-a \
-             --listen-on-stdin --verbosity=error" \
-             -o StrictHostKeyChecking=accept-new \
-             -i ~/.ssh/id_ed25519 \
-             "$PROD_SSH_TARGET" bash -s -- "$IMG_TAG"
-
         set -euo pipefail
         [[ "${PROMOTE:-}" == "prod" ]] || { echo "⏭ Skipping (PROMOTE=$PROMOTE)"; exit 0; }
 
@@ -132,8 +124,16 @@ steps:
         echo "🔑 SSH prerequisites installed"
         echo "🚀 Deploying tag $IMG_TAG to prod server $PROD_SSH_TARGET"
 
+        cat <<EOSSH | ssh -T \
+          -o ProxyCommand="gcloud compute start-iap-tunnel aptiva-prod-vm 22 \
+            --project=aptivaai-prod --zone=us-central1-a \
+            --listen-on-stdin --verbosity=error" \
+          -o StrictHostKeyChecking=accept-new \
+          -i ~/.ssh/id_ed25519 \
+          "$PROD_SSH_TARGET" bash -s -- "$IMG_TAG"
+
         set -euo pipefail
-          IMG_TAG="${1:?IMG_TAG arg missing}"
+        IMG_TAG="\${1:?IMG_TAG arg missing}"
         export IMG_TAG
 
         PROJECT=aptivaai-prod