Grant Whitmer 95c33c8004 ops: host systemd units in git; windy-pro tags never reach Windy Git ...

- deploy/systemd/: sync/backup timers+services, tunnel, and the windy-job
  heartbeat drop-ins (silent-failure audit). They existed only on Veron,
  the same drift that left the runbook wrong. GITHUB_TOKEN is stripped
  (repo is public); it stays in the root-only unit on the host.
- sync: SYNC_NO_TAGS (default windy-pro). build-electron fires on v* tags
  and targets ubuntu/macos/windows-latest, labels no runner has, so it
  would queue forever, invisibly. Desktop releases are built elsewhere.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-23 09:51:51 -04:00

..

branding

G2.3: Windy Git branding — and get it out of one host's disk into the repo

2026-08-14 09:08:48 -04:00

postgres

G2: Gitea auto-install, own DB role, SSH deferred, Actions on

2026-08-11 14:44:13 -04:00

runner

security: CI egress filter — jobs reach the internet, never Veron/LAN

2026-09-23 03:20:45 -04:00

systemd

ops: host systemd units in git; windy-pro tags never reach Windy Git

2026-09-23 09:51:51 -04:00