From 0739ea660e6507d3cfbbe9bc4a0903d75b7db9ef Mon Sep 17 00:00:00 2001
From: Peter Stone <thepeterstone@gmail.com>
Date: Fri, 17 Jul 2026 22:24:08 +0000
Subject: Guard deploy script to only run on tungsten

Refuses to run if hostname doesn't match the documented deploy host,
preventing an accidental deploy from a sandbox/dev environment.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EZ7ikw2ukGJFTHE3bJS7zL
---
 scripts/deploy | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'scripts')

diff --git a/scripts/deploy b/scripts/deploy
index adb27e2..6b3d498 100755
--- a/scripts/deploy
+++ b/scripts/deploy
@@ -6,6 +6,12 @@ cd "$(dirname "$0")/.."
 FQDN="doot.terst.org"
 SITE_DIR="/site/${FQDN}"
 SERVICE="task-dashboard@${FQDN}"
+DEPLOY_HOST="tungsten"
+
+if [ "$(hostname)" != "${DEPLOY_HOST}" ]; then
+    echo "Refusing to deploy: this is $(hostname), not ${DEPLOY_HOST}." >&2
+    exit 1
+fi
 
 echo "==> Building CSS..."
 npm run css:build
-- 
cgit v1.2.3