Makes the deploy account generic instead of per-project

No reason to mint a new system account for every project on the
same Pi - one shared, host-wide account works, namespaced by
directory per project underneath it.
This commit is contained in:
2026-07-28 19:46:58 +02:00
parent 2f243f23c3
commit 960760c24e
3 changed files with 36 additions and 17 deletions
@@ -1279,3 +1279,14 @@ by Infrastructure Design. U5 carries REF-U3-01's Umami origin gate plus FR-21 an
**Context**: OPERATIONS — Deployment Setup artifacts corrected before final approval
---
## Deployment Setup — Generic Deploy Account
**Timestamp**: 2026-07-28T04:00:00Z
**User Input**: "het deploy/pipeline-account mag een generieke zijn voor op de pi. die hoeft niet specifiek voor dit project"
**AI Response**: "Renamed the suggested account from project-specific (slpmodularcms-deploy) to generic/host-wide (pi-deploy), noting it should serve multiple projects' deploy pipelines and that the reference project's existing account should be checked and reused if it already has SSH shell access, rather than creating a duplicate. Deploy paths stay namespaced per project under that shared account's home directory, so this doesn't change the directory layout, only the account's identity/scope."
**Context**: OPERATIONS — Deployment Setup, small correction before final approval
---