From 1fb4e47d8d3b24b268f217fcb8abc3f6b4643ee9 Mon Sep 17 00:00:00 2001
From: isUnknown <adrien.payet@outlook.com>
Date: Sun, 8 Mar 2026 18:31:57 +0100
Subject: [PATCH] fix: CI deploy .user.ini + ACL mask, migration memory limit
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Déploie .user.ini via rsync pour augmenter memory_limit à 512M
- Réapplique le mask ACL rwx après chaque deploy
- ini_set('memory_limit') dans la route de migration user-projects

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .forgejo/workflows/deploy-preprod.yml               | 9 +++++++++
 .forgejo/workflows/deploy-prod.yml                  | 9 +++++++++
 public/site/config/routes/migrate-user-projects.php | 1 +
 3 files changed, 19 insertions(+)

diff --git a/.forgejo/workflows/deploy-preprod.yml b/.forgejo/workflows/deploy-preprod.yml
index cbe2808..f5519a7 100644
--- a/.forgejo/workflows/deploy-preprod.yml
+++ b/.forgejo/workflows/deploy-preprod.yml
@@ -62,3 +62,12 @@ jobs:
           sshpass -p "$PASSWORD" rsync -az --delete -O \
             -e 'ssh -p 2244 -o StrictHostKeyChecking=no' \
             assets/ $USERNAME@$HOST:$PREPROD_PATH/assets/
+
+          echo "Deploying .user.ini"
+          sshpass -p "$PASSWORD" rsync -az -O \
+            -e 'ssh -p 2244 -o StrictHostKeyChecking=no' \
+            .user.ini $USERNAME@$HOST:$PREPROD_PATH/.user.ini
+
+          echo "Fix ACL mask on writable directories"
+          sshpass -p "$PASSWORD" ssh -p 2244 -o StrictHostKeyChecking=no $USERNAME@$HOST \
+            "setfacl -m mask::rwx $PREPROD_PATH/site/accounts $PREPROD_PATH/site/cache $PREPROD_PATH/site/sessions $PREPROD_PATH/content $PREPROD_PATH/media"
diff --git a/.forgejo/workflows/deploy-prod.yml b/.forgejo/workflows/deploy-prod.yml
index d407912..a07c0f7 100644
--- a/.forgejo/workflows/deploy-prod.yml
+++ b/.forgejo/workflows/deploy-prod.yml
@@ -62,3 +62,12 @@ jobs:
           sshpass -p "$PASSWORD" rsync -az --delete -O \
             -e 'ssh -p 2244 -o StrictHostKeyChecking=no' \
             assets/ $USERNAME@$HOST:$PROD_PATH/assets/
+
+          echo "Deploying .user.ini"
+          sshpass -p "$PASSWORD" rsync -az -O \
+            -e 'ssh -p 2244 -o StrictHostKeyChecking=no' \
+            .user.ini $USERNAME@$HOST:$PROD_PATH/.user.ini
+
+          echo "Fix ACL mask on writable directories"
+          sshpass -p "$PASSWORD" ssh -p 2244 -o StrictHostKeyChecking=no $USERNAME@$HOST \
+            "setfacl -m mask::rwx $PROD_PATH/site/accounts $PROD_PATH/site/cache $PROD_PATH/site/sessions $PROD_PATH/content $PROD_PATH/media"
diff --git a/public/site/config/routes/migrate-user-projects.php b/public/site/config/routes/migrate-user-projects.php
index abe71bf..e231b34 100644
--- a/public/site/config/routes/migrate-user-projects.php
+++ b/public/site/config/routes/migrate-user-projects.php
@@ -16,6 +16,7 @@ return [
   'pattern' => 'migrate-user-projects.json',
   'method' => 'POST',
   'action' => function () {
+    ini_set('memory_limit', '512M');
     $user = kirby()->user();
 
     if (!$user || $user->role()->id() !== 'admin') {