CI: reduce signing variables from 4 to 2

effbd80090025fe792cee8409cfb091e9446a1df · Pavel Safronov · 2026-05-14 21:19:00 -0700 · parents 3a8e6502863c

CI: reduce signing variables from 4 to 2

Hardcode key alias (claudeauto, not sensitive) and use a single
KEYSTORE_PASSWORD for both storePassword and keyPassword.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

 .gitlab-ci.yml | 18 ++++++++----------
 README.md      |  6 ++----
 2 files changed, 10 insertions(+), 14 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index a83030a..ac2b001 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1,12 +1,10 @@
 # Triggered on any tag push. Push a tag of the form v1.2.3 to produce a
 # signed release APK and publish it to the project's Releases page.
 #
-# Required CI/CD variables (Settings → CI/CD → Variables, all masked):
-#   KEYSTORE_BASE64          – release keystore encoded as base64
-#                              (generate with: base64 -i release.jks | pbcopy)
-#   KEYSTORE_STORE_PASSWORD  – keystore password
-#   KEYSTORE_KEY_ALIAS       – key alias inside the keystore
-#   KEYSTORE_KEY_PASSWORD    – key password
+# Required CI/CD variables (Settings → CI/CD → Variables, both masked):
+#   KEYSTORE_BASE64    – release keystore encoded as base64
+#                        (generate with: base64 -i claudeauto-release.jks | pbcopy)
+#   KEYSTORE_PASSWORD  – keystore password (used for both store and key)
 
 stages:
   - build
@@ -50,10 +48,10 @@ build:
     # Write signing config
     - chmod +x ./gradlew
     - echo "$KEYSTORE_BASE64" | base64 -d > keystore.jks
-    - echo "release.storeFile=../keystore.jks"               > local.properties
-    - echo "release.storePassword=$KEYSTORE_STORE_PASSWORD" >> local.properties
-    - echo "release.keyAlias=$KEYSTORE_KEY_ALIAS"           >> local.properties
-    - echo "release.keyPassword=$KEYSTORE_KEY_PASSWORD"     >> local.properties
+    - echo "release.storeFile=../keystore.jks"        > local.properties
+    - echo "release.storePassword=$KEYSTORE_PASSWORD" >> local.properties
+    - echo "release.keyAlias=claudeauto"              >> local.properties
+    - echo "release.keyPassword=$KEYSTORE_PASSWORD"   >> local.properties
   script:
     - ./gradlew assembleRelease
     - |
diff --git a/README.md b/README.md
index 379f5c2..cb3069e 100644
--- a/README.md
+++ b/README.md
@@ -115,10 +115,8 @@ Configure these in **Settings → CI/CD → Variables** (all masked):
 
 | Variable | Description |
 |---|---|
-| `KEYSTORE_BASE64` | Release keystore encoded as base64 (`base64 -i release.jks`) |
-| `KEYSTORE_STORE_PASSWORD` | Keystore password |
-| `KEYSTORE_KEY_ALIAS` | Key alias within the keystore |
-| `KEYSTORE_KEY_PASSWORD` | Key password |
+| `KEYSTORE_BASE64` | Release keystore encoded as base64 (`base64 -i claudeauto-release.jks \| pbcopy`) |
+| `KEYSTORE_PASSWORD` | Keystore password (used for both the store and the key) |
 
 ---