From 482dcec7f231b50484d1e2715d8adbb60ca0bbe2 Mon Sep 17 00:00:00 2001
From: Timothy Kim <timothykim@fastmail.fm>
Date: Wed, 11 Mar 2026 18:09:05 -0400
Subject: [PATCH] add watchtower deploy step and nginx proxy for update
 endpoint

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .gitea/workflows/build.yml | 5 +++++
 nginx.conf                 | 4 ++++
 2 files changed, 9 insertions(+)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 04daa6e..4df8527 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -22,3 +22,8 @@ jobs:
           context: .
           push: true
           tags: git.timothykim.net/timothykim/static:latest
+
+      - name: Deploy
+        run: |
+          curl -sf -H "Authorization: Bearer ${{ secrets.WATCHTOWER_TOKEN }}" \
+            https://www.timothykim.net/watchtower/v1/update
diff --git a/nginx.conf b/nginx.conf
index de6ea40..347704c 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -8,6 +8,10 @@ server {
         try_files $uri $uri/ /index.html;
     }
 
+    location /watchtower/ {
+        proxy_pass http://watchtower:8080/;
+    }
+
     # Cache static assets aggressively
     location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff2)$ {
         expires 1y;