Commit Graph

13 Commits

Author SHA1 Message Date
Dhruv Sharma 1d8ed3ef8e ci: harden VPS deploy workflow 2026-04-02 12:44:50 +05:30
Dhruv Sharma d0983913fc ci: print runner-visible VPS host fingerprints 2026-04-02 12:41:56 +05:30
Dhruv Sharma 65e971349a ci: add temporary deploy fingerprint recovery mode 2026-04-02 12:39:56 +05:30
Dhruv Sharma 2a77fcd0dd ci: force full checkout on VPS deploy 2026-04-02 12:21:00 +05:30
Dhruv Sharma 42866c6a0e ci: add manual VPS deploy trigger for branch testing 2026-04-02 12:13:39 +05:30
Dhruv Sharma 377d312a84 ci: fix VPS deploy guard and fingerprint config 2026-04-02 11:21:43 +05:30
Dhruv Sharma 7534afe61f ci: fix SSH fingerprint to use RSA host key
ED25519 fingerprint was pinned but action negotiates RSA,
causing host key mismatch. Swap to correct RSA fingerprint.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-01 04:18:51 +05:30
Dhruv Sharma 088c1e5f09 ci: remove SSH host fingerprint check
Throwaway box, fingerprint check was causing mismatch failures.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-01 04:17:23 +05:30
Dhruv Sharma 2ef3141856 ci: guard against stale reruns and pin SSH host fingerprint
- Skip deploy if CI SHA is not the current tip of main (prevents stale
  rerun from rolling back production)
- Add SSH host fingerprint to prevent MITM during deployment

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-01 02:14:14 +05:30
Dhruv Sharma 3d9d317cc2 ci: deploy exact CI-passed SHA, ignore PR runs
- Checkout the specific commit that passed CI instead of origin/main tip
- Only deploy on push events to main, skip PR CI runs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-01 01:34:19 +05:30
Dhruv Sharma c10d620adf ci: wait for CI to pass before deploying to VPS
Uses workflow_run trigger so deploy only runs after CI succeeds on main.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-01 01:26:48 +05:30
Dhruv Sharma 50589b17de ci: add auto-deploy workflow for VPS
Deploys to Hetzner VPS on every push to main via SSH.
Pulls latest, installs deps, builds, and restarts pm2 services.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-01 00:05:31 +05:30
Dhruv Sharma bb8ac3a68d add GitHub Actions workflow for deploying to VPS 2026-03-31 23:44:16 +05:30