merge dispatch and deploy into a single deploy.sh

deploy.sh reads SSH_ORIGINAL_COMMAND directly, validates it, and runs the deploy. No more dispatch indirection.
2026-03-13 17:08:19 -04:00
parent f1d4508411
commit c484109f1c
4 changed files with 14 additions and 16 deletions
@@ -84,7 +84,7 @@ mkdir -p /home/deploy/.ssh
 chmod 700 /home/deploy/.ssh
 if [ ! -f /home/deploy/.ssh/authorized_keys ]; then
    echo "WARNING: Add the CI public key manually:"
-    echo '  command="/opt/hantim/scripts/deploy-dispatch.sh",no-port-forwarding,no-agent-forwarding,no-X11-forwarding,no-pty ssh-ed25519 <KEY>'
+    echo '  command="sudo /opt/hantim/scripts/deploy.sh",no-port-forwarding,no-agent-forwarding,no-X11-forwarding,no-pty ssh-ed25519 <KEY>'
    echo "  into /home/deploy/.ssh/authorized_keys"
 fi
 chown -R deploy:deploy /home/deploy/.ssh