Commit Graph
3 Commits
Author SHA1 Message Date
Gabriel Brown 26a4fd0705 ci: read the production env from Infisical and deploy on push
Build and Deploy Spoon / quality (push) Failing after 9s
Build and Deploy Spoon / build-images (push) Skipped
Each job logs in as the read-only spoon-ci machine identity and exports the Infisical prod environment, so production values no longer live in Gitea. After pushing the images, CI asks the VPS to redeploy podman-spoon.service over the forced-command deploy key, with the key passed through env so the printed script never contains it. Installs survive a half-written runner cache, and one production deploy runs at a time.

Infisical prod carries a valid JWKS; the copy in DOTENV_PROD had escaped quotes, so the Convex env sync had been serving invalid JSON at /.well-known/jwks.json. The first sync from Infisical replaces it.
2026-10-01 15:39:23 -04:00
Gabriel Brown a255a06a35 docs: rewrite for box-first model + webhooks + notifications 2026-07-11 18:23:49 -04:00
Gabriel Brown 8d2a089268 docs: server deploy changes (terminal, dotfiles, Fedora, Phase 2)
Build and Push Spoon Images / quality (push) Failing after 7s
Build and Push Spoon Images / build-images (push) Has been skipped
2026-06-24 10:32:45 -04:00