deploy: guard prod-only runtime data from rsync --delete

f23e627aefb4c41b435340e9b745d52d9e7192bd · 2026-09-04 08:25:09 -0700 · Steve Abrams

deploy.sh runs 'rsync -az --delete' with no data/ exclude, so a deploy
overwrote the box's runtime file with the local copy and destroyed
everything written since the last deploy. Added a surgical
RSYNC_EXTRA_EXCLUDES for this project's runtime path(s) only, so genuine
build artifacts under data/ keep syncing.

Verified by itemized rsync --dry-run against prod: the runtime file is
listed for transfer WITHOUT the exclude and absent WITH it.

Fleet sweep, TK-11227. Same bug class as the July 2026 artmura/quadrille
mis-target fix and the abramsagency lead-ledger fix (TK-10536).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013mq9RQtVZZEWvreDqqTgv2

Files touched

M .deploy.conf

Diff

commit f23e627aefb4c41b435340e9b745d52d9e7192bd
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Fri Sep 4 08:25:09 2026 -0700

    deploy: guard prod-only runtime data from rsync --delete
    
    deploy.sh runs 'rsync -az --delete' with no data/ exclude, so a deploy
    overwrote the box's runtime file with the local copy and destroyed
    everything written since the last deploy. Added a surgical
    RSYNC_EXTRA_EXCLUDES for this project's runtime path(s) only, so genuine
    build artifacts under data/ keep syncing.
    
    Verified by itemized rsync --dry-run against prod: the runtime file is
    listed for transfer WITHOUT the exclude and absent WITH it.
    
    Fleet sweep, TK-11227. Same bug class as the July 2026 artmura/quadrille
    mis-target fix and the abramsagency lead-ledger fix (TK-10536).
    
    Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
    Claude-Session: https://claude.ai/code/session_013mq9RQtVZZEWvreDqqTgv2
---
 .deploy.conf | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.deploy.conf b/.deploy.conf
index 471e58d..3fb3a80 100644
--- a/.deploy.conf
+++ b/.deploy.conf
@@ -1,3 +1,10 @@
 PROJECT_NAME=whatsmystyle
 DEPLOY_PATH=/root/Projects/whatsmystyle
 HEALTH_URL=http://127.0.0.1:9777/api/health
+
+# ENTIRE data/ is runtime state written by the LIVE server: whatsmystyle.db (+ -wal
+# and -shm), wms.sqlite, user uploads, waitlist.csv, logs and cache. Nothing under
+# data/ is a build artifact, so the whole dir is excluded. deploy.sh runs
+# `rsync -az --delete`; without this a deploy would overwrite the live database
+# and every user upload with whatever happens to be on the dev machine.
+RSYNC_EXTRA_EXCLUDES="/data"

← 51707d6 gitignore: exclude data/cache/ (251 img files + robots.txt c · back to Whatsmystyle · (newest)