From 16c69a106514ff956edc5a7394d71f223eda1f51 Mon Sep 17 00:00:00 2001 From: vince Date: Sat, 20 Jun 2026 17:22:16 +0200 Subject: [PATCH] docs(ci): document Forgejo deploy runner option --- README.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/README.md b/README.md index 00d9708..6cdcd09 100644 --- a/README.md +++ b/README.md @@ -161,3 +161,22 @@ The env file must provide `AGENT_CONFIG_TOKEN`. Runtime defaults inside the image set `HOST=0.0.0.0`, `PORT=3000`, `DATABASE_URL=file:/data/dimensionlab.sqlite`, and `DASHBOARD_MIGRATIONS_DIR=/repo/apps/web/drizzle`. + +### Forgejo Actions Deployment + +Merges to `main` run `.forgejo/workflows/dimensionlab-website.yml`. Pull +requests run check, test, and build only; the deploy job is guarded to run only +for `push` events on `refs/heads/main`. + +The Dimension Lab runner exposes the rootless Podman socket to job containers as +`/var/run/docker.sock`. Because this host uses SELinux labeling, the runner +configuration must set: + +```yaml +container: + options: --security-opt label=disable +``` + +The deploy job also performs a socket preflight against the +`dimensionlab-website.service` Podman label before it builds or restarts the +production container. -- 2.49.1