From d384446efc5b10587404eb42a53cc45bfbd1f2fb Mon Sep 17 00:00:00 2001
From: sirius <sirius@siriusdevops.com>
Date: Tue, 7 Jul 2026 15:21:49 -0400
Subject: [PATCH] ssh-deploy

---
 .forgejo/workflows/build.yml | 25 ++++++++++++++-----------
 1 file changed, 14 insertions(+), 11 deletions(-)

diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index f6cb120..08aa32d 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -6,17 +6,20 @@ jobs:
   build:
     runs-on: docker
     steps:
-      - name: Install node (for checkout)
-        run: |
-          which node || (apk add --no-cache nodejs npm >/dev/null 2>&1) || true
-          node --version
       - name: Checkout
         uses: https://code.forgejo.org/actions/checkout@v4
-      - name: Build image
+      - name: Deploy to Pi via SSH
+        env:
+          PI_SSH_KEY: ${{ secrets.PI_SSH_KEY }}
         run: |
-          docker build --platform linux/arm64 -t localhost/paaas:latest .
-      - name: Deploy
-        run: |
-          cd /opt/siriusdevops/services
-          docker compose up -d --force-recreate paaas
-          docker image prune -f
+          set -e
+          mkdir -p ~/.ssh
+          echo "$PI_SSH_KEY" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+          ssh-keyscan -H rpi.tail14a963.ts.net >> ~/.ssh/known_hosts 2>/dev/null || true
+          # copy source to Pi build dir
+          ssh sirius@rpi.tail14a963.ts.net 'mkdir -p /opt/siriusdevops/build/paaas'
+          scp -r . sirius@rpi.tail14a963.ts.net:/opt/siriusdevops/build/paaas/
+          # build + redeploy on the Pi using its native docker
+          ssh sirius@rpi.tail14a963.ts.net 'cd /opt/siriusdevops/build/paaas && docker build --platform linux/arm64 -t localhost/paaas:latest . && cd /opt/siriusdevops/services && docker compose up -d --force-recreate paaas && docker image prune -f'
+          echo 'paaas deployed'