# Deploy pipeline [#734]: gitea release-branch sha watcher. Feeds the
# sha-watch deploy automation (reload-only apply). The gitea webhook
# (gitea hook #10 -> pfv_deploy_git_webhook automation) is the fast path
# with full restart mapping, but gitea cannot deliver webhooks to
# CGNAT-range targets until its [webhook] ALLOWED_HOST_LIST is widened
# (founder action via Cloudron file manager); this watcher is the
# always-works safety net.
rest:
  - resource: https://git.knownelement.com/api/v1/repos/KNEL/KNELBMS/commits?sha=release&limit=1
    headers:
      Authorization: !secret gitea_auth_header
      User-Agent: pfv-bms-deploy-watch
    scan_interval: 300
    verify_ssl: true
    sensor:
      - name: PFV deploy gitea release head
        unique_id: pfv_deploy_gitea_release_head
        value_template: "{{ value_json[0].sha if value_json is list and value_json | length > 0 else (value_json | string | truncate(90)) }}"

# E2E self-deploy proof commit [#734] - if you can read this in /config,
# the sha-watch deployed it autonomously.

# Dead-man heartbeat (#792): pushes OK to the out-of-band Uptime Kuma
# (Cloudron, status.knownelement.com) every 5 minutes. If HA stops
# pushing — crash, wedge, power loss, network partition — Kuma pages
# the founder's phone directly. No HA in the alert loop.
shell_command:
  kuma_ha_heartbeat: 'curl -sS -m 15 "{{ kuma_push_url }}"'