agentbbs/.github/workflows
Anthony Ettinger a8dcc75723 ci: add mailu-update workflow to keep the mail stack current
The deploy/mailu compose stack pins the floating series tags
(ghcr.io/mailu/*:2024.06); patch releases within the series only land when
someone runs `docker compose pull`, so the box drifts behind on security fixes.

Add a scheduled (weekly) + on-demand workflow that SSHes to the droplet
(reusing deploy.yml's DEPLOY_* secrets), backs up DKIM keys + the admin DB,
pulls the latest images for the pinned series, recreates the containers, and
health-checks the Mailu front on 127.0.0.1:8080. Shares deploy.yml's
concurrency group so it never races a code deploy. Stays within the pinned
series on purpose — crossing to a future series stays a deliberate PR.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-01 02:35:55 +00:00
..
ci.yml sh1pt: install Node pnpm CI (node-pnpm-ci@1.1.0) (#6) 2026-06-14 02:49:34 -07:00
deploy.yml fix(deploy): build Go binaries on the runner, ship them, SKIP_BUILD on box (#27) 2026-06-15 07:09:57 -07:00
mailu-update.yml ci: add mailu-update workflow to keep the mail stack current 2026-07-01 02:35:55 +00:00
test.yml sh1pt: install Node pnpm Test (node-pnpm-test@1.1.0) (#5) 2026-06-14 02:49:50 -07:00
vu1nz-scan.yml Add .github/workflows/vu1nz-scan.yml via sh1pt vu1nz-scan@1.0.0 (#4) 2026-06-14 02:44:18 -07:00