From 9fd9d1b7d135fee3719446b188b2631ad752b0f6 Mon Sep 17 00:00:00 2001
From: Daniel Maksymilian Syrnicki <info@danielmaksymilian.com>
Date: Wed, 26 Aug 2026 13:12:16 +0200
Subject: [PATCH] ci: stop ops/** from triggering the ISO build; hand site
 trees back to the VM user after CI deploy

The runner job runs as root, which left /srv/furtka-site and
/var/www/furtka.org root-owned and broke the manual deploy.sh path.
Runner capacity on forge-runner-01 raised to 2 alongside this, so the
site deploy no longer queues behind an ISO build.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MScAinbyMdeNc7H2BZdnnG
---
 .forgejo/workflows/build-iso.yml | 1 +
 website/deploy-ci.sh             | 6 ++++++
 2 files changed, 7 insertions(+)

diff --git a/.forgejo/workflows/build-iso.yml b/.forgejo/workflows/build-iso.yml
index ab94870..0aaaa7c 100644
--- a/.forgejo/workflows/build-iso.yml
+++ b/.forgejo/workflows/build-iso.yml
@@ -12,6 +12,7 @@ on:
       - '**/*.md'
       - 'docs/**'
       - 'website/**'
+      - 'ops/**'
       - 'CHANGELOG.md'
       - 'RELEASING.md'
   workflow_dispatch:
diff --git a/website/deploy-ci.sh b/website/deploy-ci.sh
index 454622b..608d55d 100755
--- a/website/deploy-ci.sh
+++ b/website/deploy-ci.sh
@@ -24,4 +24,10 @@ echo "==> hugo build → $WEBROOT"
 cd "$SRCROOT"
 hugo --minify --cleanDestinationDir -d "$WEBROOT"
 
+# The runner job runs as root inside the container; hand the trees back
+# to the VM user so the manual deploy.sh path keeps working afterwards.
+if [ "$(id -u)" = 0 ]; then
+  chown -R "${FURTKA_OWNER:-1000:1000}" "$SRCROOT" "$WEBROOT"
+fi
+
 echo "OK: deployed to https://furtka.org/"