portal

T

Deploy / deploy (push) Failing after 27s

Details

Drop sudo from the deploy workflow - NoNewPrivileges blocks it outright

sudo needs setuid escalation, which the runner's own unit disables
entirely via NoNewPrivileges=yes (unconditionally, independent of any
sudoers config - the earlier sudoers.d/deploy-runner grant was never
going to work). Caddy reload already works via the runner's existing
docker group membership; the service restart now goes through plain
systemctl (talks to PID1 over D-Bus, no escalation needed), authorized
by a new polkit rule scoped to deploy-runner + app@*.service.

2026-08-04 20:36:54 +02:00

.gitea/workflows

Drop sudo from the deploy workflow - NoNewPrivileges blocks it outright

2026-08-04 20:36:54 +02:00

public

Initial commit: content-driven onboarding portal

2026-07-29 19:38:40 +02:00

src

Erase view types at every list/component boundary, not just leaves

2026-08-04 19:58:55 +02:00

style

Initial commit: content-driven onboarding portal