Renames the backup script to match the instance, not the software
Continuous Integration / config (pull_request) Successful in 10s
Continuous Integration / backend-build (pull_request) Successful in 4m6s
Continuous Integration / vulnerability-scan (pull_request) Successful in 3m39s
Continuous Integration / frontend-prepare (pull_request) Failing after 58s
Continuous Integration / frontend-build (pull_request) Skipped
Continuous Integration / frontend-test (pull_request) Skipped
Continuous Integration / frontend-lint (pull_request) Skipped
Continuous Integration / backend-test (pull_request) Successful in 4m26s
Continuous Integration / publish-test (pull_request) Skipped
Continuous Integration / publish-production (pull_request) Skipped
Continuous Integration / deploy-test (pull_request) Skipped
Continuous Integration / deploy-production (pull_request) Skipped
Continuous Integration / config (pull_request) Successful in 10s
Continuous Integration / backend-build (pull_request) Successful in 4m6s
Continuous Integration / vulnerability-scan (pull_request) Successful in 3m39s
Continuous Integration / frontend-prepare (pull_request) Failing after 58s
Continuous Integration / frontend-build (pull_request) Skipped
Continuous Integration / frontend-test (pull_request) Skipped
Continuous Integration / frontend-lint (pull_request) Skipped
Continuous Integration / backend-test (pull_request) Successful in 4m26s
Continuous Integration / publish-test (pull_request) Skipped
Continuous Integration / publish-production (pull_request) Skipped
Continuous Integration / deploy-test (pull_request) Skipped
Continuous Integration / deploy-production (pull_request) Skipped
backup-slpmodularcms-db.sh named the CMS; this backs up slpsoftware specifically, same as every other instance-scoped path already does. Hardcoded in deploy-scp.yaml itself, so this is the actual pipeline code, not just docs describing it.
This commit is contained in:
+1
-1
@@ -57,7 +57,7 @@ the documented boundary between Construction and Operations for this specific un
|
||||
|
||||
## Deferred to Operations (not built here, by design)
|
||||
|
||||
- `~/scripts/backup-slpmodularcms-db.sh` on the host (referenced, not created — a host-side script
|
||||
- `~/scripts/backup-slpsoftware-db.sh` on the host (referenced, not created — a host-side script
|
||||
is out of this repository's scope)
|
||||
- `loginctl enable-linger` for the deploy user (**INFRA-U6-01**, carried from Infrastructure Design)
|
||||
- Actual values for `DEPLOY_PATH_*`, `SERVICE_NAME_*`, `HEALTH_CHECK_URL_*` Gitea variables and the
|
||||
|
||||
+1
-1
@@ -99,7 +99,7 @@ Per-environment sequence (test runs steps 1, 3–7; production additionally runs
|
||||
|
||||
1. Download the build artifact (`actions/download-artifact`, unchanged from the reference project)
|
||||
2. **Production only** (Q8 = A): trigger a database backup over the existing SSH connection —
|
||||
`ssh {user}@{host} 'bash ~/scripts/backup-slpmodularcms-db.sh'`. The backup script itself lives
|
||||
`ssh {user}@{host} 'bash ~/scripts/backup-slpsoftware-db.sh'`. The backup script itself lives
|
||||
on the Pi and is created once during host setup (Operations, FR-23); the workflow never
|
||||
transmits or references database credentials, keeping D-16's "runtime secrets live in host
|
||||
environment variables, the workflow does not manage them" intact. This satisfies FR-20's
|
||||
|
||||
Reference in New Issue
Block a user