Auto-deploy site under wintermeyer-consulting.de/phoenix/book/

Point site.url at https://wintermeyer-consulting.de/phoenix so the
canonical URL of the `book` component renders cleanly as
/phoenix/book/<page>.html. Replace the old SSH/rsync-to-static-host
workflow with a self-hosted runner workflow (label `eliph`) that
builds the UI bundle, runs Antora, and atomically swaps a timestamped
release directory under /var/www/elixir-phoenix-ash/current/ on
bremen2. The deploy lives in a dedicated OS user and directory so it
cannot interfere with wincon on the same host. The old
elixir-phoenix-ash.com domain becomes a path-preserving 301 redirect
to the new location (nginx-side).

Why: we are folding the standalone book site into the Wintermeyer
Consulting presence so it shares navigation and styling and so we
only operate one public Phoenix ecosystem entry point.

Author: wintermeyer

.github/workflows/antora_build_deploy.yml

@@ -0,0 +1,21 @@
+name: Deploy
+
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  deploy:
+    # Self-hosted runner registered on bremen2 under the `eliph` user,
+    # with label `eliph`. Pinned so this never lands on wincon's runner
+    # or any other self-hosted fleet.
+    runs-on: [self-hosted, eliph]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Deploy
+        run: ./scripts/deploy.sh

.github/workflows/deploy.yml

@@ -52,3 +52,18 @@ npm run build && cd .. && npx antora --fetch antora-local-playbook.yml
 ```
 
 Dark mode follows the OS `prefers-color-scheme`; there is no toggle.
+
+## Deployment
+
+Pushing to `main` triggers `.github/workflows/deploy.yml`, which runs on
+a self-hosted runner (label `eliph`) on bremen2. The runner checks the
+repo out, runs `scripts/deploy.sh`, and publishes the rendered site to
+`/var/www/elixir-phoenix-ash/releases/<timestamp>/`. An atomic symlink
+swap makes `/var/www/elixir-phoenix-ash/current/` point at the new
+release. The last five releases are kept.
+
+Nginx serves the site under
+<https://wintermeyer-consulting.de/phoenix/book/> via two location
+blocks on the `wintermeyer-consulting.de` vhost (one for pages, one for
+`antora-assets/`). The old domain <https://elixir-phoenix-ash.com>
+returns a path-preserving 301 to the new location.

README.md

@@ -1,6 +1,6 @@
 site:
   title: An Elixir, Phoenix and Ash Beginner's Guide
-  url: https://elixir-phoenix-ash.com
+  url: https://wintermeyer-consulting.de/phoenix
   start_page: book:index.adoc
   keys:
     google_analytics: 'G-B4DB8GLK8G'

antora-playbook.yml

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+# Deploy the Antora site to bremen2 under
+# /var/www/elixir-phoenix-ash/releases/<timestamp>/
+# and atomically swap the `current` symlink.
+#
+# Runs on the `eliph` self-hosted GitHub Actions runner from the
+# actions/checkout workdir. Invoked as `./scripts/deploy.sh`.
+#
+# The Antora build needs Node (provided via mise under ~eliph).
+
+set -euo pipefail
+
+# Activate mise so node/npm/npx resolve on the non-interactive shell.
+if command -v mise >/dev/null 2>&1; then
+  eval "$(mise activate bash)"
+elif [ -x "$HOME/.local/bin/mise" ]; then
+  eval "$("$HOME/.local/bin/mise" activate bash)"
+fi
+
+APP_DIR="/var/www/elixir-phoenix-ash"
+RELEASES_DIR="${APP_DIR}/releases"
+CURRENT_LINK="${APP_DIR}/current"
+SHARED_DIR="${APP_DIR}/shared"
+LOCK_FILE="${SHARED_DIR}/.deploy.lock"
+KEEP_RELEASES=5
+TIMESTAMP="$(date +%Y%m%d%H%M%S)"
+RELEASE_DIR="${RELEASES_DIR}/${TIMESTAMP}"
+
+log() { echo "[$(date '+%H:%M:%S')] $*"; }
+
+mkdir -p "${SHARED_DIR}"
+exec 9>"${LOCK_FILE}"
+flock -n 9 || { log "ERROR: another deploy is running"; exit 1; }
+
+REPO_DIR="$(pwd)"
+log "Repo: ${REPO_DIR}"
+
+log "Building UI bundle..."
+( cd "${REPO_DIR}/ui-bundle" && npm ci --no-audit --no-fund && npm run build )
+
+log "Installing Antora..."
+( cd "${REPO_DIR}" && npm ci --no-audit --no-fund )
+
+log "Rendering site..."
+( cd "${REPO_DIR}" && npx antora --fetch antora-playbook.yml )
+
+if [ ! -d "${REPO_DIR}/build/site/book" ]; then
+  log "ERROR: expected build/site/book/ not found"
+  exit 1
+fi
+
+log "Publishing release ${TIMESTAMP}..."
+mkdir -p "${RELEASE_DIR}"
+cp -a "${REPO_DIR}/build/site/." "${RELEASE_DIR}/"
+chmod -R a+rX "${RELEASE_DIR}"
+
+log "Atomic swap..."
+ln -sfn "${RELEASE_DIR}" "${CURRENT_LINK}.new"
+mv -fT "${CURRENT_LINK}.new" "${CURRENT_LINK}"
+
+log "Pruning old releases (keeping last ${KEEP_RELEASES})..."
+mapfile -t _old < <(
+  find "${RELEASES_DIR}" -mindepth 1 -maxdepth 1 -type d -printf '%f\n' \
+    | sort | head -n "-${KEEP_RELEASES}"
+)
+for r in "${_old[@]}"; do
+  [ -n "${r}" ] && rm -rf "${RELEASES_DIR:?}/${r}"
+done
+
+log "Deploy complete: ${TIMESTAMP}"
+log "  Active: ${CURRENT_LINK} -> $(readlink -f "${CURRENT_LINK}")"