From 7a282639243d7491198e10763d74301f31da5b10 Mon Sep 17 00:00:00 2001
From: Esdras Renan <monkeyesdras@gmail.com>
Date: Wed, 8 Oct 2025 14:10:29 -0300
Subject: [PATCH] ci: preserve server .env files during rsync to APP_DIR (fix
 missing BETTER_AUTH_SECRET)

---
 .github/workflows/ci-cd-web-desktop.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci-cd-web-desktop.yml b/.github/workflows/ci-cd-web-desktop.yml
index c295df5..b69ec4d 100644
--- a/.github/workflows/ci-cd-web-desktop.yml
+++ b/.github/workflows/ci-cd-web-desktop.yml
@@ -33,7 +33,13 @@ jobs:
       - name: Sync workspace to APP_DIR
         run: |
           mkdir -p "$APP_DIR"
-          rsync -az --delete --exclude '.git' --exclude '.next' ./ "$APP_DIR"/
+          rsync -az --delete \
+            --exclude '.git' \
+            --exclude '.next' \
+            --exclude '.env*' \
+            --exclude 'apps/desktop/.env*' \
+            --exclude 'convex/.env*' \
+            ./ "$APP_DIR"/
 
       - name: Install and build (Next.js)
         run: |