Update deployment script

Signed-off-by: Daniel Metzner <daniel.metzner@niceshops.com>

Author: dmetzner

.github/workflows/deployment.yaml

@@ -21,8 +21,7 @@ jobs:
   # ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   # Deployment:
   #
-  #  - requires a VPN connection to the TU Graz. (SSH is only allowed inside the university network)
-  #  - a SSH connection is required (public key must be registered on server!)
+  #  - An SSH connection is required (public key must be registered on server!)
   #  - Add all credentials hidden in secrets to the configuration files
   #  - The current script is build within the Symfony framework, hence, the container is used to run the script.
   #
@@ -35,13 +34,6 @@ jobs:
       - name: 'Setup PHP and composer packages'
         uses: ./.github/actions/setup-php-composer
 
-      # Kept in case the VPN config switches again...
-      #          printf 'TUGraz-Angehoerige\n${{ secrets.VPN_PASSWD }}' | sudo openconnect vpn.tugraz.at --user=${{ secrets.VPN_USER }} & disown
-      - name: Connect to TUG via VPN
-        run: |
-          sudo apt-get --yes --force-yes install openconnect
-          printf '${{ secrets.VPN_PASSWD }}' | sudo openconnect vpn.tugraz.at --user=${{ secrets.VPN_USER }} & disown
-
       - name: Set deployment script secrets (.env.local)
         run: |
           printf '\nDEPLOY_GIT=https://github.com/Catrobat/Catroweb-Symfony.git\n' >> .env.local

deploy.php

@@ -80,7 +80,7 @@ function loadEnvVariables(string $filename): void
   ->set('symfony_env', 'prod')
   ->set('branch', getenv('DEPLOY_SHARE_BRANCH'))
   ->set('deploy_path', '/var/www/share')
-  ->set('remote_user', 'root')
+  ->set('remote_user', 'deploy')
 ;
 
 // Tasks
@@ -94,11 +94,11 @@ function loadEnvVariables(string $filename): void
 // For such sudo commands to work, the server must allow those commands without a password
 // change the sudoers file if needed!
 task('restart:nginx', function () {
-  run('/usr/sbin/service nginx restart');
+  run('sudo /usr/sbin/service nginx restart');
 });
 
 task('restart:php-fpm', function () {
-  run('/usr/sbin/service php8.3-fpm restart');
+  run('sudo /usr/sbin/service php8.3-fpm restart');
 });
 
 task('install:npm', function () {