zwitschi
1e80be746e
- Blocklist source of truth is the SQLite ledger, not git history. - data/mikrotik is a scratch mirror, not a git audit trail. - Removed the 'commit blocklist files' advice. - Added 'Deployment & updating (git pull)' section covering deploy.sh, runtime isolation, and python -m app.db --migrate (D008).
#!/usr/bin/env bash
Deployment support for the intrusion-detection IDS.
This directory is intentionally small and uses no external framework:
deploy.sh conflict-free git pull update wrapper (D004)
ids.service systemd unit template (D005)
restart-service.sh supervisor-agnostic restart shim (D005)
check_runtime_git.sh proves a scan never dirties tracked runtime files (D001)
See .github/instructions/DEPLOYMENT.md for the full plan.
set -euo pipefail