Make /opt/stack a Forgejo git checkout instead of rsync-only

Prefer stack_deploy_method=git: init/fetch on the server, register an
SSH deploy key with Forgejo, and leave local secrets untracked. Document
git pull for day-to-day updates; keep rsync as an opt-in fallback.
This commit is contained in:
tim 2026-07-22 11:12:07 -07:00
parent 6c9e085cbd
commit 90f3cf62c5
4 changed files with 159 additions and 10 deletions

View file

@ -6,3 +6,4 @@
- After any meaningful change set: **commit and push** to `main` with a clear, complete-sentence message (what changed and why).
- Never commit secrets: `.env`, `wireguard/wg0.conf`, `config/`, GGUF models, `ansible/.secrets/`.
- Prefer SSH push (`GIT_SSH_COMMAND` with `~/.ssh/id_ed25519` if needed).
- Server checkout: `/opt/stack` is the same repo (`git pull` on ser5). Ansible uses `stack_deploy_method: git`.