update.sh: run git as service user (avoid dubious-ownership when invoked as root)

This commit is contained in:
Hendrik 2026-05-01 18:07:24 +02:00
parent 198ea17414
commit d1cef98e4c

View file

@ -12,15 +12,16 @@ SERVICE_USER="nexredirect"
cd "$INSTALL_DIR"
chmod +x "$INSTALL_DIR/scripts/"*.sh 2>/dev/null || true
git fetch --tags --quiet
chown -R "$SERVICE_USER:$SERVICE_USER" "$INSTALL_DIR"
if [[ -n "$TAG" ]]; then
git checkout --quiet "$TAG"
sudo -u "$SERVICE_USER" -H bash -c "cd '$INSTALL_DIR' && git fetch --tags --quiet && git checkout --quiet '$TAG'"
else
git pull --ff-only --quiet
sudo -u "$SERVICE_USER" -H bash -c "cd '$INSTALL_DIR' && git fetch --quiet && git pull --ff-only --quiet"
fi
sudo -u "$SERVICE_USER" -H bash -c "cd '$INSTALL_DIR' && npm ci --no-audit --no-fund"
sudo -u "$SERVICE_USER" -H bash -c "cd '$INSTALL_DIR' && npm run build"
systemctl restart corex-nexredirect
echo "Update auf $(git describe --tags --always) abgeschlossen"
echo "Update auf $(sudo -u "$SERVICE_USER" -H bash -c "cd '$INSTALL_DIR' && git describe --tags --always") abgeschlossen"