create prod env

.env

@@ -1 +1,2 @@
 VITE_FLATTASTIC_API_KEY="bqOh7YBZR9fChJo81bCsTinMtGpC5aok"
+VITE_HA_TOKEN="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiI3N2JmOTk1ODI3MzA0ZWIzOWYwNThjMzQ4YTY3ZDJkYyIsImlhdCI6MTc1NjQ3NTM4OSwiZXhwIjoyMDcxODM1Mzg5fQ.TZZ4SUGlERuIVrhzC_wfCN-qS1wSAKNN9uMMDjkqOgA"

.gitea/workflows/ci.yml

@@ -16,6 +16,24 @@ jobs:
       - uses: actions/checkout@v4
       - name: Install dependencies
         run: bun install
+      - name: Prepare Vite env (build-time)
+        run: |
+          if [ -z "${VITE_FLATTASTIC_API_KEY:-}" ]; then
+            echo "Missing secret: VITE_FLATTASTIC_API_KEY" >&2
+            exit 1
+          fi
+          if [ -z "${VITE_HA_TOKEN:-}" ]; then
+            echo "Missing secret: VITE_HA_TOKEN" >&2
+            exit 1
+          fi
+
+          cat > .env.production <<EOF
+          VITE_FLATTASTIC_API_KEY=${VITE_FLATTASTIC_API_KEY}
+          VITE_HA_TOKEN=${VITE_HA_TOKEN}
+          EOF
+        env:
+          VITE_FLATTASTIC_API_KEY: ${{ secrets.VITE_FLATTASTIC_API_KEY }}
+          VITE_HA_TOKEN: ${{ secrets.VITE_HA_TOKEN }}
       - name: Build
         run: bun run build
       - name: Write Git-Hash into html

bun.lock

@@ -1,5 +1,6 @@
 {
   "lockfileVersion": 1,
+  "configVersion": 0,
   "workspaces": {
     "": {
       "name": "monitor-im-flur",

src/api/homeAssistant.ts

@@ -1,7 +1,14 @@
-const token =
+const token = import.meta.env.VITE_HA_TOKEN;
-    "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiI3N2JmOTk1ODI3MzA0ZWIzOWYwNThjMzQ4YTY3ZDJkYyIsImlhdCI6MTc1NjQ3NTM4OSwiZXhwIjoyMDcxODM1Mzg5fQ.TZZ4SUGlERuIVrhzC_wfCN-qS1wSAKNN9uMMDjkqOgA";
+
 
 async function fetchTentHumidity() {
+    if (!token) {
+        console.error("HA token not found");
+
+        return;
+    }
+
+
     const url = `https://home.rivercry.com/api/states/sensor.third_reality_inc_3rths0224z_luftfeuchtigkeit_2`;
     const response = await fetch(url, {
         method: "GET",
@@ -15,6 +22,12 @@ async function fetchTentHumidity() {
 }
 
 async function fetchTentTemperature() {
+    if (!token) {
+        console.error("HA token not found");
+
+        return;
+    }
+
     const url = `https://home.rivercry.com/api/states/sensor.third_reality_inc_3rths0224z_temperatur_2`;
     const response = await fetch(url, {
         method: "GET",