deploy-safety: exclude data/ from rsync so deploys never clobber prod-written intakes/admin edits (TK-22)

6d80e051b605828af171de28d10f4219ab9a347f · 2026-08-30 14:27:08 -0700 · Steve Abrams

Files touched

M .deploy.conf

Diff

commit 6d80e051b605828af171de28d10f4219ab9a347f
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Sun Aug 30 14:27:08 2026 -0700

    deploy-safety: exclude data/ from rsync so deploys never clobber prod-written intakes/admin edits (TK-22)
---
 .deploy.conf | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.deploy.conf b/.deploy.conf
index d865135..619882b 100644
--- a/.deploy.conf
+++ b/.deploy.conf
@@ -7,4 +7,8 @@ HEALTH_URL=http://localhost:9701/api/health
 REQUIRED_ENVS=""
 INSTALL_CMD="npm ci --production"
 BUILD_CMD="node build.mjs"
-RSYNC_EXTRA_EXCLUDES="reports"
+# exclude data/ so a security/code deploy never clobbers PROD-written state — customer
+# intake submissions (POST /api/intake) + admin command-center edits (POST /api/admin).
+# The guard fix is in code (build.mjs template + standalone admin/slideshow HTML); the
+# remote npm ci→build regenerates portal.html from the REMOTE data. (TK-22, matches DW f4772ed)
+RSYNC_EXTRA_EXCLUDES="reports data"

← 0828386 Fix creds-in-URL fetch guard on all 3 gated pages (portal/ad · back to Consulting Rentv Com · enrich RENTV command-center socials+ads from verified public 06f3892 →