timothykim 5e85de9130 fix deploy race condition and harden security ...

- reorder app.sh to run cert before commit/push (fixes workflow failure on first run)
- quote $SSH_ORIGINAL_COMMAND in authorized_keys to prevent command injection
- add port validation in service.sh nginx command
- pin host key in deploy-beszel.yml workflow
- fix append vs overwrite for known_hosts in deploy-nginx.yml

2026-04-10 15:00:10 -04:00

..

workflows

fix deploy race condition and harden security

2026-04-10 15:00:10 -04:00