ci/cd grrr

.gitlab-ci.yml

@@ -12,3 +12,4 @@ deploy_application:
     - echo -e "-----BEGIN OPENSSH PRIVATE KEY-----\n$SSH_PRIVATE_KEY\n-----END OPENSSH PRIVATE KEY-----" | ssh-add -
     - echo "$RAILS_MASTER_KEY" > config/master.key
     - bundle exec cap production deploy
+    - rm -f config/master.key

config/deploy.rb

@@ -9,16 +9,15 @@ append :linked_dirs, 'log', 'tmp/pids', 'tmp/cache', 'tmp/sockets',
        'public/system', 'data', '.bundle', 'docs'
 set :bundle_flags, '--deployment'
 set :bundle_jobs, 1
-set :bundle_env_variables, { nokogiri_use_system_libraries: 1 }
+set :bundle_env_variables, nokogiri_use_system_libraries: 1
 set :keep_releases, 2
-set :ssh_options, verify_host_key: :always
+set :ssh_options, verify_host_key_dns: true, check_host_ip: true
 
-set :default_env, {
-  rails_env: 'production',
-  rails_master_key: File.read('config/master.key'),
-  web_concurrency: '1',
-  ld_preload: '/usr/lib/libjemalloc.so'
-}
+set :default_env,
+    rails_env: 'production',
+    rails_master_key: File.read('config/master.key'),
+    web_concurrency: '1',
+    ld_preload: '/usr/lib/libjemalloc.so'
 
 after 'deploy:published', 'pumx:stop'
 after 'pumx:stop', 'pumx:start'