adding secrete for vite_base_url_api

.gitea/workflows/deploy.yml

@@ -26,8 +26,19 @@ jobs:
         shell: pwsh
         run: npm ci
 
-      # Uses the committed .env (e.g. .env.production) picked up automatically by Vite -
+      # ---- Inject VITE_API_BASE_URL from a Gitea secret so the API URL never has to be
-      # no secrets injected at build time for this project.
+      # hand-edited/committed again - only this secret needs updating when the API moves.
+      # This OVERWRITES .env.production before the build; Vite bakes it into the bundle
+      # at build time (Vite env vars are compile-time, not runtime), so nothing needs
+      # to change on the IIS/deploy side.
+      - name: Write production env - Frontend
+        shell: pwsh
+        env:
+          API_BASE_URL: ${{ secrets.LSFE_FRONTEND_VITE_API_BASE_URL }}
+        run: |
+          "VITE_API_BASE_URL=$env:API_BASE_URL" | Out-File -FilePath ".\.env.production" -Encoding utf8 -NoNewline
+          Write-Host "Wrote .env.production (value not echoed)"
+
       - name: Build (Vite production build)
         shell: pwsh
         run: npm run build