From 7266827b8812c3a622836878a1fb2af4c9e5bcbf Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 25 Aug 2026 16:22:43 +0000
Subject: [PATCH 1/2] Initial plan


From 348b309e1ba8a2ad2130fc8d14eda097bba22860 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 25 Aug 2026 16:24:32 +0000
Subject: [PATCH 2/2] Bind CD deploy job to production environment

Co-authored-by: sanket-rajput <100849898+sanket-rajput@users.noreply.github.com>
---
 .github/workflows/deploy.yml | 1 +
 deploy/README.md             | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index ff0be2d..95838f7 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -8,6 +8,7 @@ jobs:
   deploy:
     name: Deploy to Production EC2
     runs-on: ubuntu-latest
+    environment: production
     env:
       AWS_REGION: ${{ vars.AWS_REGION || secrets.AWS_REGION }}
       EC2_SECURITY_GROUP_ID: ${{ vars.EC2_SECURITY_GROUP_ID || secrets.EC2_SECURITY_GROUP_ID }}
diff --git a/deploy/README.md b/deploy/README.md
index 991ac1d..9f68c1e 100644
--- a/deploy/README.md
+++ b/deploy/README.md
@@ -53,6 +53,8 @@ Required repository variables (or secrets) for this automation:
 - `AWS_REGION`
 - `EC2_SECURITY_GROUP_ID`
 
+If these are configured as **environment-level** variables/secrets, set them in the `production` environment (the deploy job targets `environment: production`).
+
 ## 🔑 One-Time SSL Certificate Issuance (Let's Encrypt)
 
 Before issuing the certificate, ensure DNS A-Record for **`fileshare.sanketrajput.live`** points directly to your EC2 Elastic IP address.