timothykim 5e85de9130 fix deploy race condition and harden security ...

- reorder app.sh to run cert before commit/push (fixes workflow failure on first run)
- quote $SSH_ORIGINAL_COMMAND in authorized_keys to prevent command injection
- add port validation in service.sh nginx command
- pin host key in deploy-beszel.yml workflow
- fix append vs overwrite for known_hosts in deploy-nginx.yml

2026-04-10 15:00:10 -04:00

..

deploy-beszel.yml

fix deploy race condition and harden security

2026-04-10 15:00:10 -04:00

deploy-carolpreschool.com.yml

add carolpreschool.com

2026-04-09 17:40:51 -04:00

deploy-garage.yml

add workflow_dispatch and self-trigger paths to all workflows

2026-03-20 20:03:11 -04:00

deploy-goatcounter.yml

adds goatcounter

2026-04-08 20:23:22 -04:00

deploy-haanmind.net.yml

add workflow_dispatch and self-trigger paths to all workflows

2026-03-20 20:03:11 -04:00

deploy-hantim.net.yml

add workflow_dispatch and self-trigger paths to all workflows

2026-03-20 20:03:11 -04:00

deploy-hcsuzuki.music.yml

add hcsuzuki.music

2026-03-28 13:37:49 -04:00

deploy-hcsuzuki.net.yml

add workflow_dispatch and self-trigger paths to all workflows

2026-03-20 20:03:11 -04:00

deploy-nginx.yml

fix deploy race condition and harden security

2026-04-10 15:00:10 -04:00

deploy-thekims.family.yml

add workflow_dispatch and self-trigger paths to all workflows

2026-03-20 20:03:11 -04:00

deploy-timothykim.yml

add workflow_dispatch and self-trigger paths to all workflows

2026-03-20 20:03:11 -04:00

provision.yml

add workflow_dispatch and self-trigger paths to all workflows

2026-03-20 20:03:11 -04:00