deploy-safety: exclude data/ from rsync so deploys never clobber prod-written intakes/admin edits (TK-22)

5027e89f7adaf852e3727cb90fcaef4794b18f86 · 2026-08-30 14:27:08 -0700 · Steve Abrams

Files touched

M .deploy.conf

Diff

commit 5027e89f7adaf852e3727cb90fcaef4794b18f86
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Sun Aug 30 14:27:08 2026 -0700

    deploy-safety: exclude data/ from rsync so deploys never clobber prod-written intakes/admin edits (TK-22)
---
 .deploy.conf | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.deploy.conf b/.deploy.conf
index dc1d9e5..5c330b5 100644
--- a/.deploy.conf
+++ b/.deploy.conf
@@ -7,4 +7,8 @@ HEALTH_URL=http://localhost:9700/api/health
 REQUIRED_ENVS=""
 INSTALL_CMD="npm ci --production"
 BUILD_CMD="node build.mjs"
-RSYNC_EXTRA_EXCLUDES="reports"
+# exclude data/ so a security/code deploy never clobbers PROD-written state — customer
+# intake submissions (POST /api/intake) + admin command-center edits (POST /api/admin).
+# The guard fix is in code (build.mjs template + standalone admin/slideshow HTML); the
+# remote npm ci→build regenerates portal.html from the REMOTE data. (TK-22, matches DW f4772ed)
+RSYNC_EXTRA_EXCLUDES="reports data"

← 19e3da0 Fix creds-in-URL fetch guard on both gated pages (portal/adm · back to Consulting Intake · add LHF widget to intake admin command center (fleet pattern e354af7 →