juancwu/budgit
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: wrong first time setup user creation

Browse source
This commit is contained in:
juancwu 2026-02-09 21:13:46 +00:00
commit 4191758342
1 changed files with 5 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

45
docs/first-time-deployment.md
View file

@ -13,54 +13,19 @@ After completing this once, all future deploys happen automatically when you pus
## Step 1: Create the system user ## Step 1: Create the system user
Create a dedicated `budgit` user with no login shell and no home directory: Create a dedicated `budgit` user for deployment:
```bash ```bash
sudo useradd --system --no-create-home --shell /usr/sbin/nologin budgit sudo useradd --create-home --shell /bin/bash budgit
```
Create a dedicated deploy user that CI will SSH into:
```bash
sudo useradd --create-home --shell /bin/bash deploy
```
Generate an SSH key pair (on your local machine or CI):
```bash
ssh-keygen -t ed25519 -f deploy_key -N "" -C "budgit-ci-deploy"
```
Install the public key on the server:
```bash
sudo mkdir -p /home/deploy/.ssh
sudo cp deploy_key.pub /home/deploy/.ssh/authorized_keys
sudo chown -R deploy:deploy /home/deploy/.ssh
sudo chmod 700 /home/deploy/.ssh
sudo chmod 600 /home/deploy/.ssh/authorized_keys
``` ```
Grant the deploy user the specific sudo permissions it needs (no password): Grant the deploy user the specific sudo permissions it needs (no password):
```bash ```bash
sudo tee /etc/sudoers.d/budgit-deploy > /dev/null << 'EOF' sudo tee /etc/sudoers.d/budgit> /dev/null << 'EOF'
deploy ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart budgit deploy ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart budgit, /usr/bin/systemctl status budgit
EOF EOF
sudo chmod 440 /etc/sudoers.d/budgit-deploy sudo chmod 440 /etc/sudoers.d/budgit
```
The deploy user also needs write access to the deploy path:
```bash
sudo setfacl -m u:deploy:rwx /opt/budgit
```
Or alternatively, add `deploy` to the `budgit` group and ensure group write:
```bash
sudo usermod -aG budgit deploy
sudo chmod 770 /opt/budgit
``` ```
## Step 2: Create the application directory ## Step 2: Create the application directory