Deploy YouTube: non richiede credenziali nel .env locale se già sul server.

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/deploy_youtube_production.sh

@@ -22,15 +22,11 @@ YOUTUBE_CLIENT_ID="$(read_env YOUTUBE_CLIENT_ID)"
 YOUTUBE_CLIENT_SECRET="$(read_env YOUTUBE_CLIENT_SECRET)"
 YOUTUBE_PLATFORM_REFRESH_TOKEN="$(read_env YOUTUBE_PLATFORM_REFRESH_TOKEN)"
 
-if [[ -z "$YOUTUBE_CLIENT_ID" || -z "$YOUTUBE_CLIENT_SECRET" ]]; then
-  echo "Manca YOUTUBE_CLIENT_ID o YOUTUBE_CLIENT_SECRET in $ENV_FILE" >&2
-  exit 1
-fi
-
 echo "Sync codice → $SERVER:$REMOTE_DIR ..."
 bash "$ROOT/scripts/deploy/sync_to_server.sh"
 
 echo "Aggiorno variabili YouTube in $REMOTE_DIR/infra/.env ..."
+if [[ -n "$YOUTUBE_CLIENT_ID" && -n "$YOUTUBE_CLIENT_SECRET" ]]; then
   ssh "$SERVER" "bash -s" <<REMOTE
 set -euo pipefail
 ENV="$REMOTE_DIR/infra/.env"
@@ -45,7 +41,20 @@ upsert() {
 }
 upsert YOUTUBE_CLIENT_ID '${YOUTUBE_CLIENT_ID}'
 upsert YOUTUBE_CLIENT_SECRET '${YOUTUBE_CLIENT_SECRET}'
-upsert YOUTUBE_REDIRECT_URI '${YOUTUBE_REDIRECT_URI}'
+REMOTE
+else
+  echo "  (locale senza YOUTUBE_* — uso valori già presenti sul server)"
+fi
+
+ssh "$SERVER" "bash -s" <<REMOTE
+set -euo pipefail
+ENV="$REMOTE_DIR/infra/.env"
+touch "\$ENV"
+if grep -q '^YOUTUBE_REDIRECT_URI=' "\$ENV" 2>/dev/null; then
+  sed -i 's|^YOUTUBE_REDIRECT_URI=.*|YOUTUBE_REDIRECT_URI=${YOUTUBE_REDIRECT_URI}|' "\$ENV"
+else
+  echo 'YOUTUBE_REDIRECT_URI=${YOUTUBE_REDIRECT_URI}' >> "\$ENV"
+fi
 REMOTE
 
 if [[ -n "$YOUTUBE_PLATFORM_REFRESH_TOKEN" ]]; then