Document deploy ownership requirements for Gitea CI.
Deploy Ladill Mini / deploy (push) Successful in 32s

The deploy runner must own the app root so it can update the current symlink without sudo.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
isaacclad
2026-06-07 19:43:29 +00:00
co-authored by Cursor
parent 8f9fc426c3
commit c811144d2b
+6
View File
@@ -33,11 +33,17 @@ Grant the app DB user `SELECT` on `ladilldb.platform_settings` only.
```bash
sudo install -d -o deploy -g www-data /var/www/ladill-mini
sudo install -d -o deploy -g www-data /var/www/ladill-mini/{releases,shared}
sudo mysql -e "CREATE DATABASE ladill_mini CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
sudo mysql -e "CREATE USER 'ladill_mini'@'127.0.0.1' IDENTIFIED BY '<pw>';"
sudo mysql -e "GRANT ALL ON ladill_mini.* TO 'ladill_mini'@'127.0.0.1'; FLUSH PRIVILEGES;"
sudo mysql -e "GRANT SELECT ON ladilldb.platform_settings TO 'ladill_mini'@'127.0.0.1'; FLUSH PRIVILEGES;"
```
The Gitea deploy runner acts as `deploy`. The app root and `current` symlink must be
owned by `deploy` (not root), or the release switch step will fail with
`sudo: a password is required`.
## 3. Register OIDC client (platform)
```bash