Drop the sha-pinned overlay and automatic rollback. The deployment now
runs 1 replica with imagePullPolicy Always, and CI restarts it after
apply so the new :latest image is pulled.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
- Gitea Actions workflow: build, push sha-tagged image, apply kustomize, wait for rollout with auto-rollback
- Deploy to personal-site namespace, served at jesseinit.dev with TLS
- Run container as non-root and bind to 0.0.0.0
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>