From 5b68d3778a6933b4ceab0de3e74f69cb3692ede9 Mon Sep 17 00:00:00 2001
From: Josh Rose <1677846+JoshTheWanderer@users.noreply.github.com>
Date: Fri, 17 Jul 2026 12:50:36 +0200
Subject: [PATCH] chore: remove deploy config (moved to private deploys repo)

Deployment config now lives in the private etchteam/deploys repo
(firepit/ subfolder). This public repo only builds and publishes the
image to GHCR; it holds no deploy credentials. The deploys repo polls
GHCR for a new :main image and deploys it.

- Remove deploy.yml workflow and config/deploy.yml (moved to deploys)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .github/workflows/deploy.yml | 57 ------------------------------------
 config/deploy.yml            | 48 ------------------------------
 2 files changed, 105 deletions(-)
 delete mode 100644 .github/workflows/deploy.yml
 delete mode 100644 config/deploy.yml

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
deleted file mode 100644
index 92b2463e2..000000000
--- a/.github/workflows/deploy.yml
+++ /dev/null
@@ -1,57 +0,0 @@
----
-name: Deploy
-
-on:
-  workflow_dispatch:
-  workflow_run:
-    workflows: ["Build and publish container image to GHCR"]
-    types: [completed]
-    branches: [main]
-
-concurrency:
-  group: deploy-production
-  cancel-in-progress: false
-
-jobs:
-  deploy:
-    name: Deploy to production
-    runs-on: ubuntu-latest
-    if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }}
-    environment:
-      name: production
-    timeout-minutes: 30
-    permissions:
-      packages: read
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
-
-      - name: Setup Ruby
-        uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252
-        with:
-          ruby-version: "3.4"
-
-      - name: Install Kamal
-        run: gem install kamal
-
-      - name: Setup SSH agent
-        uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd
-        with:
-          ssh-private-key: ${{ secrets.DEPLOY_SSH_KEY }}
-
-      - name: Add server to known hosts
-        run: ssh-keyscan -H "$DEPLOY_HOST" >> ~/.ssh/known_hosts
-        env:
-          DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
-
-      - name: Deploy with Kamal
-        env:
-          DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
-          DEPLOY_DOMAIN: ${{ secrets.DEPLOY_DOMAIN }}
-          DEPLOY_USER: ${{ secrets.DEPLOY_USERNAME }}
-          KAMAL_REGISTRY_USERNAME: ${{ github.actor }}
-          KAMAL_REGISTRY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
-          SSL_CERTIFICATE_PEM: ${{ secrets.SSL_CERTIFICATE_PEM }}
-          SSL_PRIVATE_KEY_PEM: ${{ secrets.SSL_PRIVATE_KEY_PEM }}
-        run: kamal deploy --skip-push
diff --git a/config/deploy.yml b/config/deploy.yml
deleted file mode 100644
index 0c23af4cd..000000000
--- a/config/deploy.yml
+++ /dev/null
@@ -1,48 +0,0 @@
-# Kamal deployment configuration for Campfire
-# Documentation: https://kamal-deploy.org
-
-service: campfire
-
-image: etchteam/once-campfire
-
-builder:
-  arch: amd64
-
-servers:
-  web:
-    hosts:
-      - <%= ENV["DEPLOY_HOST"] %>
-    options:
-      env: SECRET_KEY_BASE="$(cat /root/campfire-secret-key)"
-
-proxy:
-  ssl:
-    certificate_pem: <%= ENV["SSL_CERTIFICATE_PEM"] %>
-    private_key_pem: <%= ENV["SSL_PRIVATE_KEY_PEM"] %>
-  host: <%= ENV["DEPLOY_DOMAIN"] %>
-  app_port: 5555
-  healthcheck:
-    path: /up
-    interval: 10
-    timeout: 30
-
-registry:
-  server: ghcr.io
-  username: <%= ENV["KAMAL_REGISTRY_USERNAME"] %>
-  password: <%= ENV["KAMAL_REGISTRY_PASSWORD"] %>
-
-env:
-  clear:
-    RAILS_ENV: production
-    RAILS_LOG_TO_STDOUT: "true"
-
-volumes:
-  - campfire-storage:/rails/storage
-
-ssh:
-  user: <%= ENV["DEPLOY_USER"] %>
-
-aliases:
-  console: app exec -i --reuse "bin/rails console"
-  logs: app logs -f
-  shell: app exec -i --reuse "bash"