add autodeploy and add basic auth for file uploader

README.md

@@ -1,59 +1,50 @@
-<p align="center"><a href="https://laravel.com" target="_blank"><img src="https://raw.githubusercontent.com/laravel/art/master/logo-lockup/5%20SVG/2%20CMYK/1%20Full%20Color/laravel-logolockup-cmyk-red.svg" width="400" alt="Laravel Logo"></a></p>
 
-<p align="center">
-<a href="https://github.com/laravel/framework/actions"><img src="https://github.com/laravel/framework/workflows/tests/badge.svg" alt="Build Status"></a>
-<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/dt/laravel/framework" alt="Total Downloads"></a>
-<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/v/laravel/framework" alt="Latest Stable Version"></a>
-<a href="https://packagist.org/packages/laravel/framework"><img src="https://img.shields.io/packagist/l/laravel/framework" alt="License"></a>
-</p>
+## Repo for site https://back2.iro.kosipov.ru
 
-## About Laravel
+### Autodeploy (Gitea Actions)
 
-Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable and creative experience to be truly fulfilling. Laravel takes the pain out of development by easing common tasks used in many web projects, such as:
+Workflow file: `.gitea/workflows/deploy.yml`
 
-- [Simple, fast routing engine](https://laravel.com/docs/routing).
-- [Powerful dependency injection container](https://laravel.com/docs/container).
-- Multiple back-ends for [session](https://laravel.com/docs/session) and [cache](https://laravel.com/docs/cache) storage.
-- Expressive, intuitive [database ORM](https://laravel.com/docs/eloquent).
-- Database agnostic [schema migrations](https://laravel.com/docs/migrations).
-- [Robust background job processing](https://laravel.com/docs/queues).
-- [Real-time event broadcasting](https://laravel.com/docs/broadcasting).
+Deploy starts automatically on every push to `main`.
 
-Laravel is accessible, powerful, and provides tools required for large, robust applications.
+Required repository secrets in Gitea:
 
-## Learning Laravel
+- `DEPLOY_HOST` - host of the production server (example: `back2.iro.kosipov.ru`)
+- `DEPLOY_USER` - SSH user for deploy
+- `DEPLOY_PATH` - absolute path to Laravel project on server
+- `DEPLOY_SSH_KEY` - private SSH key content (for `DEPLOY_USER`)
+- `DEPLOY_PORT` - optional, defaults to `22`
 
-Laravel has the most extensive and thorough [documentation](https://laravel.com/docs) and video tutorial library of all modern web application frameworks, making it a breeze to get started with the framework. You can also check out [Laravel Learn](https://laravel.com/learn), where you will be guided through building a modern Laravel application.
+What deployment does:
 
-If you don't feel like reading, [Laracasts](https://laracasts.com) can help. Laracasts contains thousands of video tutorials on a range of topics including Laravel, modern PHP, unit testing, and JavaScript. Boost your skills by digging into our comprehensive video library.
+- updates project to `origin/main`
+- runs `composer install --no-dev --optimize-autoloader`
+- enables maintenance mode (`php artisan down`)
+- clears stale caches, runs migrations, recreates Laravel caches
+- restarts queue workers (`php artisan queue:restart`)
+- disables maintenance mode (`php artisan up`)
 
-## Laravel Sponsors
+Server prerequisites:
 
-We would like to extend our thanks to the following sponsors for funding Laravel development. If you are interested in becoming a sponsor, please visit the [Laravel Partners program](https://partners.laravel.com).
+- `php`, `composer`, `git`, `bash` available in PATH
+- deploy user has permissions for project files and artisan commands
 
-### Premium Partners
+### File Upload Basic Auth
 
-- **[Vehikl](https://vehikl.com)**
-- **[Tighten Co.](https://tighten.co)**
-- **[Kirschbaum Development Group](https://kirschbaumdevelopment.com)**
-- **[64 Robots](https://64robots.com)**
-- **[Curotec](https://www.curotec.com/services/technologies/laravel)**
-- **[DevSquad](https://devsquad.com/hire-laravel-developers)**
-- **[Redberry](https://redberry.international/laravel-development)**
-- **[Active Logic](https://activelogic.com)**
+Upload endpoints and upload page are protected by HTTP Basic Auth with 2 users from `.env`:
 
-## Contributing
+- `FILE_LINKS_UPLOAD_USER_1`
+- `FILE_LINKS_UPLOAD_PASSWORD_1`
+- `FILE_LINKS_UPLOAD_USER_2`
+- `FILE_LINKS_UPLOAD_PASSWORD_2`
 
-Thank you for considering contributing to the Laravel framework! The contribution guide can be found in the [Laravel documentation](https://laravel.com/docs/contributions).
+Protected routes:
 
-## Code of Conduct
+- `GET /files`
+- `POST /files`
+- `POST /api/files/upload`
 
-In order to ensure that the Laravel community is welcoming to all, please review and abide by the [Code of Conduct](https://laravel.com/docs/contributions#code-of-conduct).
+Download routes stay accessible by signed link:
 
-## Security Vulnerabilities
-
-If you discover a security vulnerability within Laravel, please send an e-mail to Taylor Otwell via [taylor@laravel.com](mailto:taylor@laravel.com). All security vulnerabilities will be promptly addressed.
-
-## License
-
-The Laravel framework is open-sourced software licensed under the [MIT license](https://opensource.org/licenses/MIT).
+- `GET /files/download/{path}` (signed URL)
+- `GET /api/files/download/{path}` (signed URL)