From 79cc66f80cf10d5a4c6341c65c30c24343b1eed9 Mon Sep 17 00:00:00 2001 From: Pieter Viljoen Date: Tue, 4 Aug 2026 16:39:39 -0700 Subject: [PATCH] Drop the deploy root from the environment variables table The table listed a name no environment carries and no workflow reads, which left the operator-facing list disagreeing with the manifest about whether it should exist. Co-Authored-By: Claude Opus 5 (1M context) --- TODO.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/TODO.md b/TODO.md index bc3d9a2..c78ba00 100644 --- a/TODO.md +++ b/TODO.md @@ -126,11 +126,13 @@ Secrets and variables, per environment. The App-token pair is repository-scoped | --- | --- | | `DEPLOY_SSH_PRIVATE_KEY` | secret | | `DEPLOY_SSH_HOST`, `DEPLOY_SSH_USER`, `DEPLOY_SSH_KNOWN_HOSTS` | variable | -| `DEPLOY_ROOT`, `HUGO_BASEURL` | variable | +| `HUGO_BASEURL` | variable | | `PANGOLIN_ACCESS_TOKEN_ID`, `PANGOLIN_ACCESS_TOKEN` | secret, staging only | | `CODEGEN_APP_CLIENT_ID`, `CODEGEN_APP_PRIVATE_KEY` | secret, both stores | -`DEPLOY_SSH_PRIVATE_KEY` now holds the same key in both environments, per the decision above. The environment split still carries the deploy root, the base URL, and the staging-only token pair, so it is not decorative. +`DEPLOY_SSH_PRIVATE_KEY` holds the same key in both environments, per the decision above. The environment split still carries the base URL, the SSH endpoint, and the staging-only token pair, so it is not decorative. + +The deploy root is deliberately absent from this table. The rsync destination is anchored at the deploy key's confinement root, so the workflow names an environment rather than a host path, and a declared-but-unread name is drift no audit can tell from a missing one. The local `DEPLOY_ROOT` in `secrets/.env` is a different value and is still read.