create backup on deploy as sudo to prevent "permission denied" errors

Reviewed-on: #3

.env.example

@@ -0,0 +1,3 @@
+BESZEL_HUB_URL=http://mon.localhost
+NEXTCLOUD_DOMAIN=cld.localhost
+GITEA_URL=http://git:3000

.gitea/actions/telegram-message-escape/action.yaml

@@ -1,29 +0,0 @@
-name: '🧼 Telegram message escape'
-description: 'Automatically escapes dots, dashes, and exclamation marks for Telegram MarkdownV2'
-
-inputs:
-  message:
-    description: 'The raw text string to escape'
-    required: true
-
-outputs:
-  escaped_message:
-    description: 'The safely escaped string ready for Telegram'
-    value: ${{ steps.escape.outputs.result }}
-
-runs:
-  using: 'composite'
-  steps:
-    - id: escape
-      shell: bash
-      env:
-        RAW_MESSAGE: ${{ inputs.message }}
-      run: |
-        MSG="$RAW_MESSAGE"
-        MSG="${MSG//-/\\-}"
-        MSG="${MSG//./\\.}"
-        MSG="${MSG//!/\\!}"
-
-        echo "result<<EOF" >> $GITHUB_OUTPUT
-        echo "$MSG" >> $GITHUB_OUTPUT
-        echo "EOF" >> $GITHUB_OUTPUT

.gitea/workflows/demo.yaml

@@ -1,19 +0,0 @@
-name: Gitea Actions Demo
-run-name: ${{ gitea.actor }} is testing out Gitea Actions 🚀
-on: [push]
-
-jobs:
-  Explore-Gitea-Actions:
-    runs-on: ubuntu-latest
-    steps:
-      - run: echo "🎉 The job was automatically triggered by a ${{ gitea.event_name }} event."
-      - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by Gitea!"
-      - run: echo "🔎 The name of your branch is ${{ gitea.ref }} and your repository is ${{ gitea.repository }}."
-      - name: Check out repository code
-        uses: actions/checkout@v4
-      - run: echo "💡 The ${{ gitea.repository }} repository has been cloned to the runner."
-      - run: echo "🖥️ The workflow is now ready to test your code on the runner."
-      - name: List files in the repository
-        run: |
-          ls ${{ gitea.workspace }}
-      - run: echo "🍏 This job's status is ${{ job.status }}."

.gitea/workflows/deploy.yaml

@@ -27,7 +27,7 @@ jobs:
           SSHPASS: ${{ secrets.SSH_PASSWORD }}
           SSH_USERNAME: ${{ secrets.SSH_USERNAME }}
           SSH_HOST: ${{ secrets.SSH_HOST }}
-          DEPLOY_DIRECTORY: ${{ secrets.DEPLOY_DIRECTORY }}
+          DEPLOY_DIRECTORY: ${{ vars.DEPLOY_DIRECTORY }}
           REF_NAME: ${{ env.CLEAN_REF_NAME }}
         run: |
           sshpass -e ssh -p 22 "$SSH_USERNAME@$SSH_HOST" bash -s << EOT
@@ -42,13 +42,13 @@ jobs:
             echo "Creating backup of data/ into \${BACKUP_FILE}..."
             
             if [ -d "data" ]; then
-              tar -czf "\${BACKUP_FILE}" data
+              echo "\$SSHPASS" | sudo -S tar -czf "\${BACKUP_FILE}" data
               echo "✅ Backup created successfully!"
             else
               echo "⚡️ No data/ folder, backup creation skipped."
             fi
 
-            find backups/ -type f -name "backup-*.tar.gz" -mtime +7 -delete
+            echo "\$SSHPASS" | sudo -S find backups/ -type f -name "backup-*.tar.gz" -mtime +7 -delete
           EOT
 
       - name: 🏗️ Create docker-compose file
@@ -56,7 +56,7 @@ jobs:
           SSHPASS: ${{ secrets.SSH_PASSWORD }}
           SSH_USERNAME: ${{ secrets.SSH_USERNAME }}
           SSH_HOST: ${{ secrets.SSH_HOST }}
-          DEPLOY_DIRECTORY: ${{ secrets.DEPLOY_DIRECTORY }}
+          DEPLOY_DIRECTORY: ${{ vars.DEPLOY_DIRECTORY }}
           REF_NAME: ${{ env.CLEAN_REF_NAME }}
         run: |
           sshpass -e ssh -p 22 "$SSH_USERNAME@$SSH_HOST" \
@@ -71,7 +71,7 @@ jobs:
           SSHPASS: ${{ secrets.SSH_PASSWORD }}
           SSH_USERNAME: ${{ secrets.SSH_USERNAME }}
           SSH_HOST: ${{ secrets.SSH_HOST }}
-          DEPLOY_DIRECTORY: ${{ secrets.DEPLOY_DIRECTORY }}
+          DEPLOY_DIRECTORY: ${{ vars.DEPLOY_DIRECTORY }}
           BESZEL_AGENT_KEY: ${{ secrets.BESZEL_AGENT_KEY }}
           BESZEL_AGENT_TOKEN: ${{ secrets.BESZEL_AGENT_TOKEN }}
           BESZEL_HUB_URL: ${{ vars.BESZEL_HUB_URL }}
@@ -117,7 +117,7 @@ jobs:
           SSHPASS: ${{ secrets.SSH_PASSWORD }}
           SSH_USERNAME: ${{ secrets.SSH_USERNAME }}
           SSH_HOST: ${{ secrets.SSH_HOST }}
-          DEPLOY_DIRECTORY: ${{ secrets.DEPLOY_DIRECTORY }}
+          DEPLOY_DIRECTORY: ${{ vars.DEPLOY_DIRECTORY }}
           REF_NAME: ${{ env.CLEAN_REF_NAME }}
           TELEGRAM_TOKEN: ${{ secrets.TELEGRAM_DEPLOY_BOT_TOKEN }}
           TELEGRAM_CHAT: ${{ secrets.TELEGRAM_DEPLOY_CHAT_ID }}

IDEAS.md

@@ -1,6 +0,0 @@
-1. Backup data/ before rerun containers
-2. Auto run on new realese
-3. Разделение докер сетей
-4. Notifications
-5. Bot for server operations
-6. multi device copy-paste