fix: do not run as root

fi-ksi · Feb 2, 2024 · e9dfefe · e9dfefe
1 parent 60e57c4
commit e9dfefe
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/kleobis-deploy.sh b/kleobis-deploy.sh
@@ -4,4 +4,6 @@ git fetch origin
 git reset --hard origin/master
 
 make clean
-make all -j 1 # don't use higher -j than 1, otherwise race condition
+# Run as www-data to prevent vulnerabilities possible spread
+sudo -Hu www-data make all -j 1 && # don't use higher -j than 1, otherwise race condition
+curl --silent https://status.ahlava.cz/api/push/u44pwYohQ2 > /dev/null