Marc-André Bombeck e23dd28619 ci(coolify): explicit maintainer toggle for auto-deploy gate ...

Three releases in a row shipped via the host-side SSH retag fallback
because the COOLIFY_WEBHOOK / COOLIFY_TOKEN secrets were absent, the
deploy step warned and exited 0, and the workflow stayed green. The
silent miss meant the gap surfaced only at deploy time when /api/version
refused to advance.

The vars.COOLIFY_AUTO_DEPLOY repository variable now disambiguates
intent:
  on  — fail the step when secrets are absent (catches the gap loudly
        on the next release).
  off — unconditional skip with a notice (host-side SSH is the chosen
        path).
  unset / other — legacy warn-and-skip behaviour.

Variable lives under Settings → Secrets and variables → Actions →
Variables (not Secrets — it is intentionally readable). The warn-only
default keeps existing repos working; flipping the toggle to 'on'
turns the silent miss into a noisy error.

2026-05-14 21:41:58 +02:00

..

dependabot-auto-merge.yml

chore(deps): Bump actions/checkout from 4 to 6 (#161)

2026-05-10 16:28:06 +00:00

docker-publish.yml

ci(coolify): explicit maintainer toggle for auto-deploy gate

2026-05-14 21:41:58 +02:00

e2e.yml

chore(deps): Bump actions/checkout from 4 to 6 (#161)

2026-05-10 16:28:06 +00:00

integration.yml

chore(deps): Bump actions/checkout from 4 to 6 (#161)

2026-05-10 16:28:06 +00:00

post-publish-verify.yml

feat(ci): post-publish verify workflow

2026-05-09 20:48:37 +02:00

security.yml

ci(openapi): hard-fail on spec drift (was warn-only)

2026-05-14 17:40:17 +02:00