Private
Public Access
Point public deploy docs at the real GitHub repo
DEPLOYMENT.md's clone instructions and frontend/.env.example's VITE_SOURCE_URL default now name github.com/ds-ksmith/DS-Chat directly now that the project actually has a public home there, instead of generic placeholders -- with a note for anyone deploying from their own fork. The user's own production deploy is unaffected: it still pulls from their private Gitea instance, which mirrors to GitHub. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
+11
-9
@@ -132,30 +132,32 @@ sudo -u ds-chat ssh-keygen -t ed25519 -f /srv/ds-chat/.ssh/id_ed25519 -N ""
|
|||||||
sudo cat /srv/ds-chat/.ssh/id_ed25519.pub
|
sudo cat /srv/ds-chat/.ssh/id_ed25519.pub
|
||||||
```
|
```
|
||||||
|
|
||||||
Add that public key as a **read-only deploy key** in your git host's repo
|
This project is hosted at
|
||||||
settings (deploy keys are supported by GitHub, GitLab, Gitea, and most
|
**[github.com/ds-ksmith/DS-Chat](https://github.com/ds-ksmith/DS-Chat)**.
|
||||||
others — look for "Deploy Keys" under the repo's Settings), then:
|
Add that public key there as a **read-only deploy key** (Settings → Deploy
|
||||||
|
Keys on the repo), then:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
sudo -u ds-chat ssh-keyscan <YOUR_GIT_HOST> >> /srv/ds-chat/.ssh/known_hosts
|
sudo -u ds-chat ssh-keyscan github.com >> /srv/ds-chat/.ssh/known_hosts
|
||||||
sudo -u ds-chat git clone git@<YOUR_GIT_HOST>:<YOUR_ORG>/ds-chat.git /srv/ds-chat
|
sudo -u ds-chat git clone git@github.com:ds-ksmith/DS-Chat.git /srv/ds-chat
|
||||||
```
|
```
|
||||||
|
|
||||||
(If your git host's SSH is on a non-default port, adjust the clone URL and
|
(Deploying from your own fork instead? Substitute its clone URL — the same
|
||||||
`ssh-keyscan -p <port>` accordingly.)
|
deploy-key/access-token steps work the same way on GitHub, GitLab, Gitea,
|
||||||
|
and most other git hosts.)
|
||||||
|
|
||||||
**Alternative: a personal/deployment-user access token instead of a deploy
|
**Alternative: a personal/deployment-user access token instead of a deploy
|
||||||
key** — skip the `.ssh`/`ssh-keygen`/`ssh-keyscan` commands above entirely
|
key** — skip the `.ssh`/`ssh-keygen`/`ssh-keyscan` commands above entirely
|
||||||
and clone over HTTPS with the token embedded in the URL:
|
and clone over HTTPS with the token embedded in the URL:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
sudo -u ds-chat git clone https://<TOKEN>@<YOUR_GIT_HOST>/<YOUR_ORG>/ds-chat.git /srv/ds-chat
|
sudo -u ds-chat git clone https://<TOKEN>@github.com/ds-ksmith/DS-Chat.git /srv/ds-chat
|
||||||
```
|
```
|
||||||
|
|
||||||
The token then lives in plaintext in `/srv/ds-chat/.git/config` (`git
|
The token then lives in plaintext in `/srv/ds-chat/.git/config` (`git
|
||||||
remote -v` shows it) — readable by root and the `ds-chat` user, not by
|
remote -v` shows it) — readable by root and the `ds-chat` user, not by
|
||||||
anyone else under normal file permissions. `deploy/upgrade.sh`'s later
|
anyone else under normal file permissions. `deploy/upgrade.sh`'s later
|
||||||
`git pull`s reuse this same authenticated URL automatically, no extra
|
`git fetch`es reuse this same authenticated URL automatically, no extra
|
||||||
setup needed. Fine as long as the token is scoped to read-only access on
|
setup needed. Fine as long as the token is scoped to read-only access on
|
||||||
just this repo.
|
just this repo.
|
||||||
|
|
||||||
|
|||||||
@@ -1,6 +1,7 @@
|
|||||||
# Shown as the "Source code" link in the app's About screen -- required
|
# Shown as the "Source code" link in the app's About screen -- required
|
||||||
# for AGPL-3.0 section 13 compliance once you deploy this (a link so users
|
# for AGPL-3.0 section 13 compliance once you deploy this (a link so users
|
||||||
# interacting with the app over the network can get the actual source,
|
# interacting with the app over the network can get the actual source,
|
||||||
# including any modifications you've made). Point this at wherever *your*
|
# including any modifications you've made). The default below points at
|
||||||
# copy of the repo actually lives, not the upstream project.
|
# the upstream project -- fine if you're running it unmodified, but if
|
||||||
VITE_SOURCE_URL=https://example.com/your-org/ds-chat
|
# you've forked or patched the code, point this at *your* copy instead.
|
||||||
|
VITE_SOURCE_URL=https://github.com/ds-ksmith/DS-Chat
|
||||||
|
|||||||
Reference in New Issue
Block a user