From 8ff7831dc72355ce3a7a3156e670c76984d27f96 Mon Sep 17 00:00:00 2001
From: grendervill <focuse@grandell.ru>
Date: Sat, 19 Sep 2026 20:29:39 +0300
Subject: [PATCH] =?UTF-8?q?fix(deploy):=20ssh=20=D0=BF=D1=80=D0=B8=20?=
 =?UTF-8?q?=D0=B7=D0=B0=D0=B3=D1=80=D1=83=D0=B7=D0=BA=D0=B5=20=D1=81=D0=B5?=
 =?UTF-8?q?=D1=80=D1=82=D0=B8=D1=84=D0=B8=D0=BA=D0=B0=D1=82=D0=B0=20=D0=BD?=
 =?UTF-8?q?=D0=B5=20=D1=87=D0=B8=D1=82=D0=B0=D0=B5=D1=82=20stdin=20(=D0=BB?=
 =?UTF-8?q?=D0=BE=D0=BC=D0=B0=D0=BB=D0=BE=20sudo=20-S)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 deploy/install.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/deploy/install.sh b/deploy/install.sh
index dcf7625..4418bb0 100755
--- a/deploy/install.sh
+++ b/deploy/install.sh
@@ -753,7 +753,7 @@ turn_shared_secret() {
 # контейнер LiveKit. Продление выполняет glchat-cert-refresh.timer.
 fetch_remote_turn_certificate() {
     [ -n "$TURN_CERT_REMOTE" ] || return 1
-    local ssh_opts=(-o BatchMode=yes -o StrictHostKeyChecking=accept-new -p "$TURN_CERT_SSH_PORT")
+    local ssh_opts=(-n -o BatchMode=yes -o StrictHostKeyChecking=accept-new -p "$TURN_CERT_SSH_PORT")
     [ -n "$TURN_CERT_SSH_KEY" ] && ssh_opts+=(-i "$TURN_CERT_SSH_KEY")
     command -v ssh >/dev/null 2>&1 || {
         warn "ssh не найден: не могу забрать сертификат с ${TURN_CERT_REMOTE}"
@@ -911,7 +911,7 @@ TMP_CRT="\$(mktemp)"; TMP_KEY="\$(mktemp)"
 trap 'rm -f "\$TMP_CRT" "\$TMP_KEY"' EXIT
 
 if [ -n "\$REMOTE" ]; then
-    ssh_opts="-o BatchMode=yes -o StrictHostKeyChecking=accept-new -p \$SSH_PORT"
+    ssh_opts="-n -o BatchMode=yes -o StrictHostKeyChecking=accept-new -p \$SSH_PORT"
     [ -n "\$SSH_KEY" ] && ssh_opts="\$ssh_opts -i \$SSH_KEY"
     # shellcheck disable=SC2086
     ssh \$ssh_opts "\$REMOTE" "cat '\$REMOTE_CRT'" >"\$TMP_CRT" || exit 1