From 17b31938c93a9b3f173749bbe9a279741a36a65a Mon Sep 17 00:00:00 2001
From: FastDefence <aaa100@outlook.jp>
Date: Sun, 19 Apr 2026 02:36:25 +0900
Subject: [PATCH 01/13] =?UTF-8?q?add:=20CI/CD=20workflow=E3=81=A8CD?=
 =?UTF-8?q?=E7=94=A8compose=E3=83=95=E3=82=A1=E3=82=A4=E3=83=AB=E3=82=92?=
 =?UTF-8?q?=E8=BF=BD=E5=8A=A0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/CD.yml | 20 ++++++++++
 .github/workflows/CI.yml | 84 ++++++++++++++++++++++++++++++++++++++++
 docker-compose.cd.yml    | 44 +++++++++++++++++++++
 3 files changed, 148 insertions(+)
 create mode 100644 .github/workflows/CD.yml
 create mode 100644 .github/workflows/CI.yml
 create mode 100644 docker-compose.cd.yml

diff --git a/.github/workflows/CD.yml b/.github/workflows/CD.yml
new file mode 100644
index 0000000..67009a8
--- /dev/null
+++ b/.github/workflows/CD.yml
@@ -0,0 +1,20 @@
+name: CD
+
+on:
+  workflow_call:
+  workflow_dispatch:
+
+jobs:
+  deploy:
+    runs-on: self-hosted
+    steps:
+      - name: SSH and Deploy
+        run: |
+          ssh -o StrictHostKeyChecking=no deploy-user@${{ secrets.CONTAINER_IP }} << 'EOF'
+            set -e
+            cd /home/deploy-user/SeeFT-Actions-Test
+            echo '${{ secrets.HARBOR_PASS }}' | docker login '${{ secrets.HARBOR_REG }}' -u '${{ secrets.HARBOR_USERNAME }}' --password-stdin
+            docker compose -f docker-compose.cd.yml pull
+            docker compose -f docker-compose.cd.yml up -d
+            docker image prune -f
+          EOF
\ No newline at end of file
diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
new file mode 100644
index 0000000..2189675
--- /dev/null
+++ b/.github/workflows/CI.yml
@@ -0,0 +1,84 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - develop
+      - feat/mitomen/261/CI-CD-Pipeline
+  workflow_dispatch:
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v6
+        with:
+          submodules: recursive
+          token: ${{ secrets.GH_PAT || github.token }}
+
+      - name: Connect to Tailscale
+        uses: tailscale/github-action@v2
+        with:
+          oauth-client-id: ${{ secrets.TAILSCALE_OAUTH_CLIENT_ID }}
+          oauth-secret: ${{ secrets.TAILSCALE_OAUTH_CLIENT_SECRET }}
+          tags: tag:ci
+
+      - name: Configure Insecure Registry
+        run: |
+          sudo service docker stop
+          echo "{\"insecure-registries\": [\"${{ secrets.HARBOR_REG }}\"]}" | sudo tee /etc/docker/daemon.json
+          sudo service docker start
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          driver-opts: network=host
+          config-inline: |
+            [registry."${{ secrets.HARBOR_REG }}"]
+              http = true
+              insecure = true
+
+      - name: Log in to Harbor
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ secrets.HARBOR_REG }}
+          username: ${{ secrets.HARBOR_USERNAME }}
+          password: ${{ secrets.HARBOR_PASS }}
+
+      - name: Create .env file
+        run: |
+          mkdir -p mobile/env
+          echo "${{ secrets.SEEFT_MOBILE_ENVS }}" > mobile/env/.env
+
+      - name: Build and Push API
+        uses: docker/build-push-action@v5
+        with:
+          context: ./api
+          file: ./api/prod.Dockerfile
+          push: true
+          tags: ${{ secrets.HARBOR_REG }}/seeft/api:latest
+          cache-from: type=gha
+
+      - name: Build and Push Admin
+        uses: docker/build-push-action@v5
+        with:
+          context: ./admin
+          file: ./admin/prod.Dockerfile
+          push: true
+          tags: ${{ secrets.HARBOR_REG }}/seeft/admin:latest
+          cache-from: type=gha
+
+      - name: Build and Push Mobile
+        uses: docker/build-push-action@v5
+        with:
+          context: ./mobile
+          file: ./mobile/Dockerfile
+          push: true
+          tags: ${{ secrets.HARBOR_REG }}/seeft/mobile:latest
+          cache-from: type=gha
+
+  trigger-cd:
+    needs: build-and-push
+    uses: ./.github/workflows/CD.yml
+    secrets: inherit
\ No newline at end of file
diff --git a/docker-compose.cd.yml b/docker-compose.cd.yml
new file mode 100644
index 0000000..fd49a24
--- /dev/null
+++ b/docker-compose.cd.yml
@@ -0,0 +1,44 @@
+version: "3"
+services:
+  cloudflare:
+    image: "cloudflare/cloudflared:latest"
+    container_name: "nutfes-seeft-web"
+    volumes: ["./web/prod:/home/nonroot/.cloudflared"]
+    command: tunnel run
+
+  mobile:
+    image: ${HARBOR_REG}/seeft/mobile:latest
+    container_name: "nutfes-seeft-mobile"
+    command: "python3 ./python/server.py"
+    ports: ["45029:45029"]
+    environment:
+      NEXT_PUBLIC_APP_ENV: "production"
+    depends_on: ["api"]
+    restart: always
+
+  api:
+    image: ${HARBOR_REG}/seeft/api:latest
+    container_name: "nutfes-seeft-api"
+    volumes: ["./api:/env/app"]
+    command: sh -c "go build -o main main.go && ./main"
+    env_file: ["./api/env/seeft.env"]
+    ports: ["1234:1234"]
+    restart: always
+
+  admin:
+    image: ${HARBOR_REG}/seeft/admin:latest
+    container_name: "nutfes-seeft-admin"
+    command: sh -c "npm install && npm run build && npm run start"
+    ports:
+      - "5000:3000"
+    environment:
+      NEXT_PUBLIC_APP_ENV: "production"
+    stdin_open: true
+    tty: true
+    depends_on: [api]
+    restart: always
+
+networks:
+  default:
+    name: seeft-default
+    external: true
\ No newline at end of file

From a9054925ddad948f6763eda443f1859e896e8d62 Mon Sep 17 00:00:00 2001
From: FastDefence <aaa100@outlook.jp>
Date: Sun, 19 Apr 2026 03:40:40 +0900
Subject: [PATCH 02/13] =?UTF-8?q?fix:=20CD.yml=E3=81=AE=E3=82=BF=E3=83=BC?=
 =?UTF-8?q?=E3=82=B2=E3=83=83=E3=83=88=E3=83=87=E3=82=A3=E3=83=AC=E3=82=AF?=
 =?UTF-8?q?=E3=83=88=E3=83=AA=E3=82=92=E4=BF=AE=E6=AD=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/CD.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/CD.yml b/.github/workflows/CD.yml
index 67009a8..80452c1 100644
--- a/.github/workflows/CD.yml
+++ b/.github/workflows/CD.yml
@@ -12,7 +12,7 @@ jobs:
         run: |
           ssh -o StrictHostKeyChecking=no deploy-user@${{ secrets.CONTAINER_IP }} << 'EOF'
             set -e
-            cd /home/deploy-user/SeeFT-Actions-Test
+            cd /home/deploy-user/SeeFT
             echo '${{ secrets.HARBOR_PASS }}' | docker login '${{ secrets.HARBOR_REG }}' -u '${{ secrets.HARBOR_USERNAME }}' --password-stdin
             docker compose -f docker-compose.cd.yml pull
             docker compose -f docker-compose.cd.yml up -d

From 7c53aeeeb19cbe962a115da76720a2b901b859bb Mon Sep 17 00:00:00 2001
From: FastDefence <aaa100@outlook.jp>
Date: Sun, 19 Apr 2026 03:58:50 +0900
Subject: [PATCH 03/13] =?UTF-8?q?fix:=20main=E3=83=96=E3=83=A9=E3=83=B3?=
 =?UTF-8?q?=E3=83=81=E3=81=AB=E3=83=9E=E3=83=BC=E3=82=B8=E3=81=95=E3=82=8C?=
 =?UTF-8?q?=E3=81=9F=E9=9A=9B=E3=81=ABCICD=E3=81=8C=E8=B5=B0=E3=82=8B?=
 =?UTF-8?q?=E3=82=88=E3=81=86=E3=81=AB=E4=BF=AE=E6=AD=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/CI.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index 2189675..c00b2be 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -3,8 +3,8 @@ name: CI
 on:
   push:
     branches:
-      - develop
-      - feat/mitomen/261/CI-CD-Pipeline
+      - main
+  workflow_call:
   workflow_dispatch:
 
 jobs:

From bcab84b8eee5d3330fd2598ba38cd1bf41e21d41 Mon Sep 17 00:00:00 2001
From: Fastdefence <65479627+FastDefence@users.noreply.github.com>
Date: Sun, 19 Apr 2026 04:34:16 +0900
Subject: [PATCH 04/13] Update .github/workflows/CD.yml

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
---
 .github/workflows/CD.yml | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/CD.yml b/.github/workflows/CD.yml
index 80452c1..9b3bfe1 100644
--- a/.github/workflows/CD.yml
+++ b/.github/workflows/CD.yml
@@ -10,7 +10,21 @@ jobs:
     steps:
       - name: SSH and Deploy
         run: |
-          ssh -o StrictHostKeyChecking=no deploy-user@${{ secrets.CONTAINER_IP }} << 'EOF'
+      - name: Add deploy host key
+        run: |
+          mkdir -p ~/.ssh
+          ssh-keyscan -H "${{ secrets.CONTAINER_IP }}" >> ~/.ssh/known_hosts
+
+      - name: SSH and Deploy
+        run: |
+          ssh deploy-user@${{ secrets.CONTAINER_IP }} << 'EOF'
+            set -e
+            cd /home/deploy-user/SeeFT
+            echo '${{ secrets.HARBOR_PASS }}' | docker login '${{ secrets.HARBOR_REG }}' -u '${{ secrets.HARBOR_USERNAME }}' --password-stdin
+            docker compose -f docker-compose.cd.yml pull
+            docker compose -f docker-compose.cd.yml up -d
+            docker image prune -f
+          EOF
             set -e
             cd /home/deploy-user/SeeFT
             echo '${{ secrets.HARBOR_PASS }}' | docker login '${{ secrets.HARBOR_REG }}' -u '${{ secrets.HARBOR_USERNAME }}' --password-stdin

From a6aecbb6b038954ae3fcf36ad30e704bc4a6ffd5 Mon Sep 17 00:00:00 2001
From: Fastdefence <65479627+FastDefence@users.noreply.github.com>
Date: Sun, 19 Apr 2026 04:37:13 +0900
Subject: [PATCH 05/13] =?UTF-8?q?fix:=20=E5=A4=89=E6=9B=B4=E3=82=92fetch?=
 =?UTF-8?q?=E3=81=99=E3=82=8B=E3=82=88=E3=81=86=E3=81=AB=E4=BF=AE=E6=AD=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
---
 .github/workflows/CD.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/CD.yml b/.github/workflows/CD.yml
index 9b3bfe1..a571ed2 100644
--- a/.github/workflows/CD.yml
+++ b/.github/workflows/CD.yml
@@ -27,6 +27,8 @@ jobs:
           EOF
             set -e
             cd /home/deploy-user/SeeFT
+            git fetch origin main
+            git reset --hard origin/main
             echo '${{ secrets.HARBOR_PASS }}' | docker login '${{ secrets.HARBOR_REG }}' -u '${{ secrets.HARBOR_USERNAME }}' --password-stdin
             docker compose -f docker-compose.cd.yml pull
             docker compose -f docker-compose.cd.yml up -d

From 3acc9ad6496bdc4a0c582072976126ee4cb540c9 Mon Sep 17 00:00:00 2001
From: FastDefence <aaa100@outlook.jp>
Date: Sun, 19 Apr 2026 04:49:22 +0900
Subject: [PATCH 06/13] =?UTF-8?q?fix=20:=20external:=20true=E3=81=AF?=
 =?UTF-8?q?=E3=81=A4=E3=81=91=E3=81=AA=E3=81=84?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docker-compose.cd.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/docker-compose.cd.yml b/docker-compose.cd.yml
index fd49a24..af1aa45 100644
--- a/docker-compose.cd.yml
+++ b/docker-compose.cd.yml
@@ -40,5 +40,4 @@ services:
 
 networks:
   default:
-    name: seeft-default
-    external: true
\ No newline at end of file
+    name: seeft-default
\ No newline at end of file

From e79994456d60cdc1626b7656a2b36f6dcd4a44d7 Mon Sep 17 00:00:00 2001
From: Fastdefence <65479627+FastDefence@users.noreply.github.com>
Date: Sun, 19 Apr 2026 04:55:48 +0900
Subject: [PATCH 07/13] =?UTF-8?q?fix:=20env=E3=82=92echo=E3=81=A7=E3=81=AF?=
 =?UTF-8?q?=E3=81=AA=E3=81=8Fprintf=E3=81=A7=E5=87=BA=E5=8A=9B?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
---
 .github/workflows/CI.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index c00b2be..d720e70 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -49,7 +49,7 @@ jobs:
       - name: Create .env file
         run: |
           mkdir -p mobile/env
-          echo "${{ secrets.SEEFT_MOBILE_ENVS }}" > mobile/env/.env
+          printf '%s' "${{ secrets.SEEFT_MOBILE_ENVS }}" > mobile/env/.env
 
       - name: Build and Push API
         uses: docker/build-push-action@v5

From 8d256a0330d801475139224b5f7d8578ca7d6d18 Mon Sep 17 00:00:00 2001
From: Fastdefence <65479627+FastDefence@users.noreply.github.com>
Date: Sun, 19 Apr 2026 05:02:20 +0900
Subject: [PATCH 08/13] fix: config-inline->buildkitd-config-inline

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
---
 .github/workflows/CI.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index d720e70..7f8f75e 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -34,7 +34,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
         with:
           driver-opts: network=host
-          config-inline: |
+          buildkitd-config-inline: |
             [registry."${{ secrets.HARBOR_REG }}"]
               http = true
               insecure = true

From 196cfc871f4147b6e26f9f4bd9b304ba29ccacf7 Mon Sep 17 00:00:00 2001
From: Fastdefence <65479627+FastDefence@users.noreply.github.com>
Date: Sun, 19 Apr 2026 13:45:16 +0900
Subject: [PATCH 09/13] =?UTF-8?q?fix:=20CD.yml=20=E3=82=92=E4=BF=AE?=
 =?UTF-8?q?=E6=AD=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/CD.yml | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/.github/workflows/CD.yml b/.github/workflows/CD.yml
index a571ed2..56bfcca 100644
--- a/.github/workflows/CD.yml
+++ b/.github/workflows/CD.yml
@@ -8,8 +8,6 @@ jobs:
   deploy:
     runs-on: self-hosted
     steps:
-      - name: SSH and Deploy
-        run: |
       - name: Add deploy host key
         run: |
           mkdir -p ~/.ssh
@@ -18,13 +16,6 @@ jobs:
       - name: SSH and Deploy
         run: |
           ssh deploy-user@${{ secrets.CONTAINER_IP }} << 'EOF'
-            set -e
-            cd /home/deploy-user/SeeFT
-            echo '${{ secrets.HARBOR_PASS }}' | docker login '${{ secrets.HARBOR_REG }}' -u '${{ secrets.HARBOR_USERNAME }}' --password-stdin
-            docker compose -f docker-compose.cd.yml pull
-            docker compose -f docker-compose.cd.yml up -d
-            docker image prune -f
-          EOF
             set -e
             cd /home/deploy-user/SeeFT
             git fetch origin main

From 766ee941e99d674b13d6151330f093777784a0bc Mon Sep 17 00:00:00 2001
From: FastDefence <aaa100@outlook.jp>
Date: Wed, 22 Apr 2026 16:44:33 +0900
Subject: [PATCH 10/13] =?UTF-8?q?CI.yml,=20CD.yml=E3=82=92=E7=8F=BE?=
 =?UTF-8?q?=E5=9C=A8=E3=81=AE=E3=83=96=E3=83=A9=E3=83=B3=E3=83=81=E3=82=88?=
 =?UTF-8?q?=E3=81=86=E3=81=AB=E8=AA=BF=E6=95=B4(=E3=83=AC=E3=83=93?=
 =?UTF-8?q?=E3=83=A5=E3=83=BC=E5=BE=8C=E5=8F=96=E3=82=8A=E6=B6=88=E3=81=97?=
 =?UTF-8?q?)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/CD.yml | 8 +++++---
 .github/workflows/CI.yml | 3 ++-
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/CD.yml b/.github/workflows/CD.yml
index 56bfcca..d65ce47 100644
--- a/.github/workflows/CD.yml
+++ b/.github/workflows/CD.yml
@@ -18,10 +18,12 @@ jobs:
           ssh deploy-user@${{ secrets.CONTAINER_IP }} << 'EOF'
             set -e
             cd /home/deploy-user/SeeFT
-            git fetch origin main
-            git reset --hard origin/main
+            git config --global --add safe.directory /home/deploy-user/SeeFT
+            git fetch origin feat/mitomen/261/CI-CD-Pipeline
+            git reset --hard origin/feat/mitomen/261/CI-CD-Pipeline
+            git checkout -B feat/mitomen/261/CI-CD-Pipeline origin/feat/mitomen/261/CI-CD-Pipeline
             echo '${{ secrets.HARBOR_PASS }}' | docker login '${{ secrets.HARBOR_REG }}' -u '${{ secrets.HARBOR_USERNAME }}' --password-stdin
             docker compose -f docker-compose.cd.yml pull
             docker compose -f docker-compose.cd.yml up -d
             docker image prune -f
-          EOF
\ No newline at end of file
+          EOF
diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml
index 7f8f75e..f781a94 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/CI.yml
@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+      - feat/mitomen/261/CI-CD-Pipeline
   workflow_call:
   workflow_dispatch:
 
@@ -81,4 +82,4 @@ jobs:
   trigger-cd:
     needs: build-and-push
     uses: ./.github/workflows/CD.yml
-    secrets: inherit
\ No newline at end of file
+    secrets: inherit

From ac32349ca0b88588d060dbddab68488c9b92d52b Mon Sep 17 00:00:00 2001
From: Fastdefence <65479627+FastDefence@users.noreply.github.com>
Date: Wed, 22 Apr 2026 16:58:52 +0900
Subject: [PATCH 11/13] fix : Delete .env
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

本番サーバー用の.envが上書きされてしまうため消去しました。
あかんかったら教えてください。
今は.envはActionsのSecretsに登録して流し込んでます。
---
 .env | 7 -------
 1 file changed, 7 deletions(-)
 delete mode 100644 .env

diff --git a/.env b/.env
deleted file mode 100644
index 973d45e..0000000
--- a/.env
+++ /dev/null
@@ -1,7 +0,0 @@
-APPLICATION_ENV="develop"
-SERVER_ADDRESS="0.0.0.0"
-SERVER_PORT="3000"
-DATABASE_HOST="nutfes-seeft-db"
-DATABASE_USER="seeft"
-DATABASE_PASSWORD="password"
-DATABASE_NAME="seeft_db"
\ No newline at end of file

From c95100f9b951694b8a576a3df9fd8645656c5f37 Mon Sep 17 00:00:00 2001
From: FastDefence <aaa100@outlook.jp>
Date: Sun, 26 Apr 2026 14:20:43 +0900
Subject: [PATCH 12/13] fix: file name

---
 .github/workflows/{CD.yml => deploy-prod.yml}      | 0
 .github/workflows/{CI.yml => integration-prod.yml} | 0
 2 files changed, 0 insertions(+), 0 deletions(-)
 rename .github/workflows/{CD.yml => deploy-prod.yml} (100%)
 rename .github/workflows/{CI.yml => integration-prod.yml} (100%)

diff --git a/.github/workflows/CD.yml b/.github/workflows/deploy-prod.yml
similarity index 100%
rename from .github/workflows/CD.yml
rename to .github/workflows/deploy-prod.yml
diff --git a/.github/workflows/CI.yml b/.github/workflows/integration-prod.yml
similarity index 100%
rename from .github/workflows/CI.yml
rename to .github/workflows/integration-prod.yml

From 0e23719e26da7ce7cf62dd80893799ac48dcd3d7 Mon Sep 17 00:00:00 2001
From: FastDefence <aaa100@outlook.jp>
Date: Thu, 30 Apr 2026 20:38:44 +0900
Subject: [PATCH 13/13] =?UTF-8?q?fix:=20=E5=BE=AE=E8=AA=BF=E6=95=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../{deploy-prod.yml => deployment-prod.yml}   | 18 +++++++++++++-----
 .github/workflows/integration-prod.yml         |  2 +-
 2 files changed, 14 insertions(+), 6 deletions(-)
 rename .github/workflows/{deploy-prod.yml => deployment-prod.yml} (51%)

diff --git a/.github/workflows/deploy-prod.yml b/.github/workflows/deployment-prod.yml
similarity index 51%
rename from .github/workflows/deploy-prod.yml
rename to .github/workflows/deployment-prod.yml
index d65ce47..51c20cd 100644
--- a/.github/workflows/deploy-prod.yml
+++ b/.github/workflows/deployment-prod.yml
@@ -11,19 +11,27 @@ jobs:
       - name: Add deploy host key
         run: |
           mkdir -p ~/.ssh
-          ssh-keyscan -H "${{ secrets.CONTAINER_IP }}" >> ~/.ssh/known_hosts
+          ssh-keygen -R "${{ secrets.CONTAINER_IP }}" 2>/dev/null || true
+          echo "${{ secrets.DEPLOY_HOST_KEY }}" >> ~/.ssh/known_hosts
 
       - name: SSH and Deploy
+        env:
+          HARBOR_PASS: ${{ secrets.HARBOR_PASS }}
+          HARBOR_REG: ${{ secrets.HARBOR_REG }}
+          HARBOR_USERNAME: ${{ secrets.HARBOR_USERNAME }}
         run: |
-          ssh deploy-user@${{ secrets.CONTAINER_IP }} << 'EOF'
+          ssh deploy-user@${{ secrets.CONTAINER_IP }} -T \
+            -o SendEnv=HARBOR_PASS \
+            -o SendEnv=HARBOR_REG \
+            -o SendEnv=HARBOR_USERNAME \
+            bash -s << 'EOF'
             set -e
             cd /home/deploy-user/SeeFT
-            git config --global --add safe.directory /home/deploy-user/SeeFT
             git fetch origin feat/mitomen/261/CI-CD-Pipeline
             git reset --hard origin/feat/mitomen/261/CI-CD-Pipeline
             git checkout -B feat/mitomen/261/CI-CD-Pipeline origin/feat/mitomen/261/CI-CD-Pipeline
-            echo '${{ secrets.HARBOR_PASS }}' | docker login '${{ secrets.HARBOR_REG }}' -u '${{ secrets.HARBOR_USERNAME }}' --password-stdin
+            echo "$HARBOR_PASS" | docker login "$HARBOR_REG" -u "$HARBOR_USERNAME" --password-stdin
             docker compose -f docker-compose.cd.yml pull
             docker compose -f docker-compose.cd.yml up -d
             docker image prune -f
-          EOF
+          EOF
\ No newline at end of file
diff --git a/.github/workflows/integration-prod.yml b/.github/workflows/integration-prod.yml
index f781a94..0ae6387 100644
--- a/.github/workflows/integration-prod.yml
+++ b/.github/workflows/integration-prod.yml
@@ -81,5 +81,5 @@ jobs:
 
   trigger-cd:
     needs: build-and-push
-    uses: ./.github/workflows/CD.yml
+    uses: ./.github/workflows/deployment-prod.yml
     secrets: inherit