ci: forcar uso de APP_DIR no /home/renan e copiar .env de /srv se existir\n\n- Determina EFFECTIVE_APP_DIR sempre como /home/renan/apps/sistema (evita quaisquer pastas com perms quebradas).\n- Copia .env de /srv/apps/sistema quando presente para manter segredos corretos.

.github/workflows/ci-cd-web-desktop.yml

@@ -58,19 +58,13 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Determine writable APP_DIR
+      - name: Determine APP_DIR (fallback safe path)
         id: appdir
         run: |
-          DEFAULT_DIR="${APP_DIR:-/srv/apps/sistema}"
           FALLBACK_DIR="$HOME/apps/sistema"
-          TARGET_DIR="$DEFAULT_DIR"
-          mkdir -p "$TARGET_DIR" 2>/dev/null || true
-          if ! (test -d "$TARGET_DIR" && test -w "$TARGET_DIR"); then
-            TARGET_DIR="$FALLBACK_DIR"
-            mkdir -p "$TARGET_DIR"
-          fi
-          echo "Using APP_DIR=$TARGET_DIR"
-          echo "EFFECTIVE_APP_DIR=$TARGET_DIR" >> "$GITHUB_ENV"
+          mkdir -p "$FALLBACK_DIR"
+          echo "Using APP_DIR (fallback)=$FALLBACK_DIR"
+          echo "EFFECTIVE_APP_DIR=$FALLBACK_DIR" >> "$GITHUB_ENV"
 
       - name: Setup pnpm
         uses: pnpm/action-setup@v4
@@ -110,6 +104,14 @@ jobs:
             $EXCLUDE_ENV \
             ./ "$EFFECTIVE_APP_DIR"/
 
+      - name: Copy production .env if present
+        run: |
+          DEFAULT_DIR="${APP_DIR:-/srv/apps/sistema}"
+          if [ "$EFFECTIVE_APP_DIR" != "$DEFAULT_DIR" ] && [ -f "$DEFAULT_DIR/.env" ]; then
+            echo "Copying production .env from $DEFAULT_DIR to $EFFECTIVE_APP_DIR"
+            cp -f "$DEFAULT_DIR/.env" "$EFFECTIVE_APP_DIR/.env"
+          fi
+
       - name: Install and build (Next.js)
         run: |
           cd "$APP_DIR"