From 213f76a7b4669af556deb4b889e8591af1a4d082 Mon Sep 17 00:00:00 2001
From: gnezim <gnezim@gmail.com>
Date: Tue, 28 Apr 2026 20:04:23 +0300
Subject: [PATCH] release-verify: fix YAML syntax, use external gost config

- Move gost YAML config to separate file to avoid heredoc issues
- Copy config from repo instead of inline heredoc
---
 .gitea/workflows/gost.yaml          | 44 +++++++++++++++++++++++++
 .gitea/workflows/release-verify.yml | 50 ++---------------------------
 2 files changed, 47 insertions(+), 47 deletions(-)
 create mode 100644 .gitea/workflows/gost.yaml

diff --git a/.gitea/workflows/gost.yaml b/.gitea/workflows/gost.yaml
new file mode 100644
index 00000000..1a9892e5
--- /dev/null
+++ b/.gitea/workflows/gost.yaml
@@ -0,0 +1,44 @@
+services:
+  - name: http-8888
+    addr: "0.0.0.0:8888"
+    handler: { type: http, chain: chain-smart }
+    listener: { type: tcp }
+
+  - name: socks-1081
+    addr: "127.0.0.1:1081"
+    handler: { type: socks5, chain: chain-smart }
+    listener: { type: tcp }
+
+chains:
+  - name: chain-smart
+    hops:
+      - name: tim-via-webzavod
+        addr: 127.0.0.1:1180
+        connector: { type: socks5 }
+        dialer: { type: tcp }
+        bypass: tim-whitelist
+
+      - name: default-socks
+        addr: 127.0.0.1:1080
+        connector: { type: socks5 }
+        dialer: { type: tcp }
+        bypass: tim-blacklist
+
+bypasses:
+  - name: tim-whitelist
+    whitelist: true
+    matchers: &tim_matchers
+      - ".webzavod.ru"
+      - ".devwebzavod.ru"
+      - ".aeroflot.ru"
+      - "webzavod.ru"
+      - "devwebzavod.ru"
+      - "aeroflot.ru"
+      - "46.235.186.67"
+      - "195.209.66.54"
+      - "195.209.82.146"
+      - "46.235.189.158"
+
+  - name: tim-blacklist
+    whitelist: false
+    matchers: *tim_matchers
diff --git a/.gitea/workflows/release-verify.yml b/.gitea/workflows/release-verify.yml
index 570ea8fe..f6506851 100644
--- a/.gitea/workflows/release-verify.yml
+++ b/.gitea/workflows/release-verify.yml
@@ -57,53 +57,9 @@ jobs:
             -D 127.0.0.1:1180 gnezim@192.168.88.58
           echo "SSH SOCKS tunnel established on port 1180"
 
-          # Create gost config with conditional routing
-          cat > /tmp/gost.yaml <<'EOF'
-services:
-  - name: http-8888
-    addr: "0.0.0.0:8888"
-    handler: { type: http, chain: chain-smart }
-    listener: { type: tcp }
-
-  - name: socks-1081
-    addr: "127.0.0.1:1081"
-    handler: { type: socks5, chain: chain-smart }
-    listener: { type: tcp }
-
-chains:
-  - name: chain-smart
-    hops:
-      - name: tim-via-webzavod
-        addr: 127.0.0.1:1180
-        connector: { type: socks5 }
-        dialer: { type: tcp }
-        bypass: tim-whitelist
-
-      - name: default-socks
-        addr: 127.0.0.1:1080
-        connector: { type: socks5 }
-        dialer: { type: tcp }
-        bypass: tim-blacklist
-
-bypasses:
-  - name: tim-whitelist
-    whitelist: true
-    matchers: &tim_matchers
-      - ".webzavod.ru"
-      - ".devwebzavod.ru"
-      - ".aeroflot.ru"
-      - "webzavod.ru"
-      - "devwebzavod.ru"
-      - "aeroflot.ru"
-      - "46.235.186.67"
-      - "195.209.66.54"
-      - "195.209.82.146"
-      - "46.235.189.158"
-
-  - name: tim-blacklist
-    whitelist: false
-    matchers: *tim_matchers
-EOF
+          # Copy gost config from repo
+          cp .gitea/workflows/gost.yaml /tmp/gost.yaml
+          echo "gost config copied to /tmp/gost.yaml"
 
           # Start gost with the config
           gost -C /tmp/gost.yaml -L :8888 &