From b7f55ee88055d2a0cc3300ec096e02ccfcc64c5e Mon Sep 17 00:00:00 2001
From: Lee Ilseob <moon27456@naver.com>
Date: Wed, 29 Jul 2026 04:19:46 +0900
Subject: [PATCH] =?UTF-8?q?fix(infra):=20=EC=9A=B4=EC=98=81=20=EB=B0=B0?=
 =?UTF-8?q?=ED=8F=AC=20Secret=20SCP=20=EA=B6=8C=ED=95=9C=20=EB=B0=8F=20?=
 =?UTF-8?q?=EB=A1=9C=EA=B7=B8=20=EA=B2=BD=EB=A1=9C=20=EC=88=98=EC=A0=95=20?=
 =?UTF-8?q?(#214)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/deploy-to-prod-ec2.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/deploy-to-prod-ec2.yml b/.github/workflows/deploy-to-prod-ec2.yml
index 959e06cf..63422ae6 100644
--- a/.github/workflows/deploy-to-prod-ec2.yml
+++ b/.github/workflows/deploy-to-prod-ec2.yml
@@ -116,6 +116,10 @@ jobs:
             printf '%s' "${!name}" | base64 -w 0 > "deploy-secrets/$name"
           done
 
+          # scp-action Docker 컨테이너가 다른 UID로 파일을 읽을 수 있도록 전송 직전에만 권한 허용
+          chmod 755 .deploy-secrets
+          chmod 644 .deploy-secrets/*
+
       - name: 📤 Upload deployment secrets to EC2
         uses: appleboy/scp-action@v0.1.7
         with:
@@ -223,7 +227,7 @@ jobs:
               --spring.profiles.active=prod > app-prod.log 2>&1 &
 
             echo "✅ 배포 완료!"
-            echo "📄 로그: ~/nadab-prod/app-prod.log"
+            echo "📄 로그: ~/nadab/app-prod.log"
 
       - name: 🧹 Cleanup deployment secrets
         if: always()