ci: use sudo when syncing .next on VPS

.github/workflows/ci.yml

@@ -304,15 +304,15 @@ jobs:
           VPS_HOST: ${{ secrets.SSH_DEPLOY_HOST }}
           VPS_USER: ${{ secrets.SSH_DEPLOY_USER }}
         run: |
-          # Substitute from Attic cache (fast)
+          # Update profile + sync git repo + sync .next + restart
           ssh "$VPS_USER@$VPS_HOST" \
-            "sudo /nix/var/nix/profiles/default/bin/nix-store --realise '$STORE_PATH'"
-          # Update profile + sync git repo + restart
-          ssh "$VPS_USER@$VPS_HOST" \
-            "sudo /nix/var/nix/profiles/default/bin/nix-env \
+            "sudo /nix/var/nix/profiles/default/bin/nix-store --realise '$STORE_PATH' && \
+            sudo /nix/var/nix/profiles/default/bin/nix-env \
               --profile /nix/var/nix/profiles/mcpedia-web \
               --set '$STORE_PATH' && \
             (cd /home/code/mcpedia && git fetch origin main && git reset --hard origin/main) && \
+            sudo rm -rf /home/code/mcpedia/apps/web/.next && \
+            sudo cp -r '$STORE_PATH/share/mcpedia-web/.next' /home/code/mcpedia/apps/web/.next && \
             sudo systemctl restart mcpedia-web && \
             sleep 3 && \
             sudo systemctl status mcpedia-web --no-pager --no-legend | head -5"

web.nix

@@ -3,23 +3,11 @@
 # so .next is built in CI via `bun run build` and packaged here.
 { pkgs
 , stdenv
-, writeShellScriptBin
 , bun
 , webNextDir
 , ...
 }:
 
-let
-  mcpedia-web-script = writeShellScriptBin "mcpedia-web" ''
-    #!${pkgs.bash}/bin/bash
-    export NODE_ENV=production
-    export PORT=4016
-    cd /home/code/mcpedia/apps/web
-    rm -f .next
-    ln -s "${webNextDir}" .next
-    exec "${bun}/bin/bun" x next start -p 4016
-  '';
-in
 stdenv.mkDerivation {
   pname = "mcpedia-web";
   version = "1.0.0";
@@ -31,6 +19,15 @@ stdenv.mkDerivation {
     cp -r "${webNextDir}/." $out/share/mcpedia-web/.next/
 
     mkdir -p $out/bin
-    cp ${mcpedia-web-script}/bin/mcpedia-web $out/bin/mcpedia-web
+    cat > $out/bin/mcpedia-web <<EOF
+#!${pkgs.bash}/bin/bash
+export NODE_ENV=production
+export PORT=4016
+cd /home/code/mcpedia
+rm -rf apps/web/.next
+cp -r "$out/share/mcpedia-web/.next" apps/web/.next
+exec "${bun}/bin/bun" run --cwd apps/web start
+EOF
+    chmod +x $out/bin/mcpedia-web
   '';
 }