Prefer stack_deploy_method=git: init/fetch on the server, register an SSH deploy key with Forgejo, and leave local secrets untracked. Document git pull for day-to-day updates; keep rsync as an opt-in fallback.
539 B
539 B
Agent notes (arr-stack)
Git
- Remote:
origin→ssh://git@192.168.8.123:2222/tim/stack.git(Forgejotim/stack) - After any meaningful change set: commit and push to
mainwith a clear, complete-sentence message (what changed and why). - Never commit secrets:
.env,wireguard/wg0.conf,config/, GGUF models,ansible/.secrets/. - Prefer SSH push (
GIT_SSH_COMMANDwith~/.ssh/id_ed25519if needed). - Server checkout:
/opt/stackis the same repo (git pullon ser5). Ansible usesstack_deploy_method: git.