big update

.gitea/workflows/deploy-infrastructure.yml

@@ -11,6 +11,10 @@ on:
         type: string
         required: false
         default: "https://secrets.itlab-ffeks.dnu.edu.ua"
+      infisical_env:
+        description: "Infisical Environment"
+        type: string
+        required: false
     secrets:
       infisical_cicd_token:
         description: "Infisical Service Token for CI/CD secrets"
@@ -49,10 +53,15 @@ jobs:
           export INFISICAL_DOMAIN="$INFISICAL_API_URL"
           export INFISICAL_DISABLE_UPDATE_CHECK=true
 
+          INFISICAL_ENV="${{ inputs.infisical_env }}"
+          if [ -z "$INFISICAL_ENV" ]; then
+            INFISICAL_ENV="${{ gitea.ref_name }}"
+          fi
+
           # Fetch secrets (assuming CLI is pre-installed)
           echo "Fetching secrets from Infisical..."
-          PROXMOX_VE_API_TOKEN=$(infisical secrets get PROXMOX_VE_API_TOKEN --plain)
-          INFRASTRUCTURE_TOKEN=$(infisical secrets get INFRASTRUCTURE_TOKEN --plain)
+          PROXMOX_VE_API_TOKEN=$(infisical secrets get PROXMOX_VE_API_TOKEN --env="$INFISICAL_ENV" --plain)
+          INFRASTRUCTURE_TOKEN=$(infisical secrets get INFRASTRUCTURE_TOKEN --env="$INFISICAL_ENV" --plain)
 
           # Mask values in logs immediately
           echo "::add-mask::$PROXMOX_VE_API_TOKEN"