From 31ebb5e5f2638f51500a3f82cdfa0d3a36bbf1b4 Mon Sep 17 00:00:00 2001
From: kcar <kcar@kevlarai.com>
Date: Wed, 27 May 2026 23:24:29 +0100
Subject: [PATCH] ci: add tlsync deploy workflow

---
 .gitea/workflows/deploy.yml | 33 +++++++++++++++++++++++++++++++++
 .gitignore                  |  3 +++
 2 files changed, 36 insertions(+)
 create mode 100644 .gitea/workflows/deploy.yml

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
new file mode 100644
index 0000000..5b79357
--- /dev/null
+++ b/.gitea/workflows/deploy.yml
@@ -0,0 +1,33 @@
+name: tlsync-ci-deploy
+
+on:
+  push:
+    branches: [master]
+  workflow_dispatch:
+
+jobs:
+  build-deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Build TLSync image
+        run: docker build -t cc-tlsync-ci:${{ github.sha }} .
+
+      - name: Configure SSH
+        run: |
+          mkdir -p ~/.ssh
+          printf '%s\n' "${{ secrets.DEPLOY_SSH_PRIVATE_KEY }}" > ~/.ssh/deploy_key
+          chmod 600 ~/.ssh/deploy_key
+          printf '%s\n' "${{ secrets.DEPLOY_KNOWN_HOSTS }}" > ~/.ssh/known_hosts
+
+      - name: Deploy TLSync
+        run: |
+          ssh -i ~/.ssh/deploy_key "${{ secrets.DEPLOY_USER }}@${{ secrets.TLSYNC_DEPLOY_HOST }}" '
+            set -euo pipefail
+            cd /home/kcar/tlsync
+            git fetch origin master
+            git reset --hard origin/master
+            docker compose -p tlsync -f docker-compose.yml up -d --build
+            docker compose -p tlsync -f docker-compose.yml ps
+          '
diff --git a/.gitignore b/.gitignore
index f0b6e9f..a0ac412 100644
--- a/.gitignore
+++ b/.gitignore
@@ -10,3 +10,6 @@ data/
 .env.local
 .env.production
 core
+# Runtime logs
+*.log
+logs/