From 650ad273496393a4cbaaba190ba8c2ad33c7191b Mon Sep 17 00:00:00 2001
From: sirius0xdev <sirius0xdev@proton.me>
Date: Thu, 9 Jul 2026 19:22:30 -0400
Subject: [PATCH] =?UTF-8?q?CI:=20deploy=20locally=20on=20the=20Pi=20(no=20?=
 =?UTF-8?q?SSH/scp)=20=E2=80=94=20runner=20already=20has=20docker=20socket?=
 =?UTF-8?q?=20+=20/opt/siriusdevops=20mounted?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .forgejo/workflows/build.yml | 26 +++++++++++++-------------
 1 file changed, 13 insertions(+), 13 deletions(-)

diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index b276602..475f42a 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -8,18 +8,18 @@ jobs:
     steps:
       - name: Checkout
         uses: https://code.forgejo.org/actions/checkout@v4
-      - name: Deploy to Pi via SSH
-        env:
-          PI_SSH_KEY: ${{ secrets.PI_SSH_KEY }}
+      - name: Build and deploy on the Pi (local docker)
         run: |
           set -e
-          mkdir -p ~/.ssh
-          echo "$PI_SSH_KEY" > ~/.ssh/id_ed25519
-          chmod 600 ~/.ssh/id_ed25519
-          ssh-keyscan -H rpi.tail14a963.ts.net >> ~/.ssh/known_hosts 2>/dev/null || true
-          # ship source to the Pi build dir
-          ssh sirius@rpi.tail14a963.ts.net 'rm -rf /opt/siriusdevops/build/osint-dashboard && mkdir -p /opt/siriusdevops/build/osint-dashboard'
-          scp -r . sirius@rpi.tail14a963.ts.net:/opt/siriusdevops/build/osint-dashboard/
-          # build arm64 images on the Pi's native docker, then bring up the stack
-          ssh sirius@rpi.tail14a963.ts.net 'cd /opt/siriusdevops/build/osint-dashboard && docker compose build --no-cache && docker compose up -d --force-recreate && docker image prune -f'
-          echo 'osint-dashboard deployed'
+          # The forgejo-runner runs on the Pi with /var/run/docker.sock and
+          # /opt/siriusdevops mounted, so we deploy locally — no SSH/scp needed.
+          BUILD_DIR=/opt/siriusdevops/build/osint-dashboard
+          rm -rf "$BUILD_DIR"
+          mkdir -p "$BUILD_DIR"
+          # ship checked-out source into the build dir (local fs copy)
+          cp -r "${GITHUB_WORKSPACE}/." "$BUILD_DIR/"
+          cd "$BUILD_DIR"
+          docker compose build --no-cache
+          docker compose up -d --force-recreate
+          docker image prune -f
+          echo 'osint-dashboard deployed (local)'