docs(ci): rewrite setup guide for Gitea Webhook deploy trigger

The previous doc assumed a Gitea Actions workflow (which requires a
self-hosted act_runner that we don't have, hence the 'No matching
online runner with label: ubuntu-latest' error).

The actual setup is much simpler: a Gitea Webhook pointing at the
deploy endpoint. No runner, no workflow file. Setup is one-time in
Settings -> Webhooks -> Add Webhook.

Documents:
- The push -> webhook -> deploy -> EasyPanel flow
- Exact payload URL, method, content type, events
- Test Delivery verification step
- Why Gitea Actions doesn't work without act_runner
- Troubleshooting: push not triggering, build failure modes
  (nixpacks 'No start command', node 20 vs 22), and a curl recipe
  for redeploying without a code change.

.dockerignore

@@ -0,0 +1,34 @@
+# Build artifacts
+node_modules/
+dist/
+.astro/
+
+# CI / Gitea
+.gitea/
+.github/
+
+# Local dev / IDE
+.DS_Store
+.vscode/
+.idea/
+*.log
+*.tmp
+.env
+.env.*
+!.env.example
+
+# Git
+.git/
+.gitignore
+
+# Docker (don't include Docker files in the build context of themselves)
+Dockerfile
+.dockerignore
+docker-compose*.yml
+
+# Docs
+docs/
+
+# Misc
+coverage/
+*.tsbuildinfo

.gitignore

@@ -26,3 +26,4 @@ uploads/
 # Generated
 emdash-env.d.ts
 .hermes/
+scripts/__pycache__/

Dockerfile

@@ -0,0 +1,29 @@
+# =====================================================================
+# Stage 1: Build the Astro static site
+# =====================================================================
+FROM node:22-alpine AS builder
+
+WORKDIR /app
+
+# Install deps with cache layer
+COPY package*.json ./
+RUN npm ci --no-audit --no-fund
+
+# Build
+COPY . .
+RUN npm run build
+
+# =====================================================================
+# Stage 2: Serve with nginx
+# =====================================================================
+FROM nginx:1.27-alpine
+
+# Astro outputs to ./dist by default
+COPY --from=builder /app/dist /usr/share/nginx/html
+
+# nginx config: SPA-friendly, gzip, cache headers for static assets
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+
+EXPOSE 80
+
+CMD ["nginx", "-g", "daemon off;"]

docs/ci-setup.md

@@ -0,0 +1,109 @@
+# CI/CD Setup — Deploy via Gitea Webhook
+
+The site auto-rebuilds on every push to `main` via a Gitea **webhook**
+(no Actions runner, no `.gitea/workflows/`, no act_runner required).
+
+## How it works
+
+```
+git push origin main
+      │
+      ▼
+Gitea Webhook (Gitea built-in, not Gitea Actions)
+      │  POST  Content-Type: application/json
+      ▼
+http://110.164.146.47:3000/api/deploy/<token>
+      │  HTTP 200 "Deploying..."
+      ▼
+EasyPanel pulls repo, builds with Dockerfile, redeploys
+```
+
+## One-time webhook setup
+
+In `https://git.moreminimore.com/kunthawat/dealplustech-astroreal/settings/hooks`:
+
+1. Click **Add Webhook → Gitea**
+2. Fill in:
+   - **Payload URL**: `http://110.164.146.47:3000/api/deploy/772d2c3a4a7d8671657c947c059bc1cdc64bd816efb7fbe2`
+   - **HTTP Method**: `POST`
+   - **Content Type**: `application/json`
+   - **Events**: **Push events**
+   - **Active**: ✓
+   - **Branch filter**: leave empty (or `main` to restrict)
+3. Click **Add Webhook**
+4. Test: click the webhook row → **Test Delivery** → **Push events** → confirm
+   **Last Response** is HTTP 200.
+
+Done. From now on every push to main redeploys automatically.
+
+## EasyPanel service requirements
+
+The service on the panel side (`project=customerwebsite`,
+`service=dealplustech-astro`) must be:
+
+- **Type: `app`**
+- **Source: Git**, branch `main`
+- **Build type: `dockerfile`**, file `Dockerfile` at repo root
+- **Port: `80`**
+
+The Dockerfile is two-stage:
+
+1. `node:22-alpine` — runs `npm ci` and `npm run build` to produce
+   `dist/`
+2. `nginx:1.27-alpine` — copies `dist/` to nginx's web root and serves
+   it (with gzip, security headers, 1-year cache for hashed assets,
+   and a `try_files` fallback for Astro's UTF-8 slugs)
+
+## Why not Gitea Actions?
+
+Gitea Actions does **not** ship with managed runners (unlike GitHub
+Actions' `ubuntu-latest`). Without a self-hosted `act_runner` registered
+with matching labels, any workflow run will fail with
+**"No matching online runner with label: ubuntu-latest"**.
+
+The Gitea Webhook mechanism is built into Gitea itself — no runner
+required. It fires the same events but POSTs to a URL you control,
+which is the simplest possible deploy trigger.
+
+If a real CI step is ever needed (lint, test, build artifact), install
+`act_runner` on a box, register it, and write a workflow using
+`runs-on: self-hosted`. See `act_runner` docs for setup.
+
+## Troubleshooting
+
+### Push happened, but site didn't update
+
+1. Open the webhook row in Settings → Webhooks
+2. Open **Recent Deliveries**
+3. Check the most recent one:
+   - Status 200 → deploy endpoint received it, check EasyPanel logs
+   - Status != 200 → check the response body
+   - **No recent delivery** → webhook is not bound to this branch/event
+     or the push target branch doesn't match the filter
+
+### Build fails inside EasyPanel
+
+1. EasyPanel UI → service `dealplustech-astro` → Logs tab
+2. Look for the `nixpacks` or `docker build` step
+3. Common failures:
+   - **"No start command could be found"**: you're on `nixpacks`. Switch
+     build type to `dockerfile` and point at `Dockerfile` at repo root.
+   - **"Node.js v20.x is not supported by Astro"**: the Dockerfile is
+     using `node:20-alpine`. It should be `node:22-alpine` (Astro 6
+     requires `>=22.12.0`).
+   - **"Failed to sync changes"** (HTTP 500 from the deploy endpoint):
+     usually a panel-side state issue. Retry, or open the service in
+     the panel UI and check container state.
+
+### Want to redeploy without a code change
+
+The webhook URL itself is idempotent. You can hit it directly with:
+
+```bash
+curl -X POST \
+  "http://110.164.146.47:3000/api/deploy/772d2c3a4a7d8671657c947c059bc1cdc64bd816efb7fbe2"
+```
+
+A `200` response with body `Deploying...` means the panel accepted the
+trigger. The actual rebuild happens in the background — check EasyPanel
+UI for the progress.

nginx.conf

@@ -0,0 +1,55 @@
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server;
+    server_name _;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # gzip
+    gzip on;
+    gzip_vary on;
+    gzip_min_length 1024;
+    gzip_types
+        text/plain
+        text/css
+        text/javascript
+        text/xml
+        application/javascript
+        application/json
+        application/xml
+        application/xml+rss
+        image/svg+xml
+        font/ttf
+        font/otf;
+
+    # Security headers
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+
+    # Cache static assets aggressively (Astro hashes filenames)
+    location ~* \.(?:js|css|woff2?|ttf|otf|eot|svg|jpg|jpeg|png|webp|avif|ico)$ {
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+        try_files $uri =404;
+    }
+
+    # Don't cache HTML
+    location ~* \.html$ {
+        expires -1;
+        add_header Cache-Control "no-cache, no-store, must-revalidate";
+    }
+
+    # Thai URL slugs (Astro file-based routing produces paths with UTF-8 chars)
+    location / {
+        try_files $uri $uri/ $uri.html /index.html;
+    }
+
+    # healthcheck
+    location /healthz {
+        access_log off;
+        return 200 "ok\n";
+        add_header Content-Type text/plain;
+    }
+}

package.json

@@ -1,5 +1,5 @@
 {
-  "name": "dealplustech-emdash",
+  "name": "dealplustech-astroreal",
   "type": "module",
   "version": "1.0.0",
   "description": "Deal Plus Tech - ระบบน้ำคุณภาพสูง ราคาโรงงาน",

public/images/HDPE/welding.svg

@@ -1,6 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="400" height="400" viewBox="0 0 400 400">
-  <rect width="400" height="400" fill="#2563eb"/>
-  <text x="200" y="100" text-anchor="middle" fill="white" font-family="sans-serif" font-size="24" font-weight="600">เครื่องเชื่อม HDPE</text>
-  <rect x="100" y="160" width="200" height="140" rx="15" fill="none" stroke="white" stroke-width="6"/>
-  <line x1="200" y1="200" x2="200" y2="260" stroke="white" stroke-width="6" stroke-linecap="round"/>
-</svg>

public/images/portfolio/.omc/state/agent-replay-77cb8f65-501a-417d-8d97-926fcba021ef.jsonl

@@ -1,6 +0,0 @@
-{"t":0,"agent":"ad4128b","agent_type":"unknown","event":"agent_stop","success":true}
-{"t":0,"agent":"ad64cdc","agent_type":"unknown","event":"agent_stop","success":true}
-{"t":0,"agent":"af7261d","agent_type":"unknown","event":"agent_stop","success":true}
-{"t":0,"agent":"ab325cf","agent_type":"unknown","event":"agent_stop","success":true}
-{"t":0,"agent":"a61235c","agent_type":"unknown","event":"agent_stop","success":true}
-{"t":0,"agent":"a9ce12a","agent_type":"unknown","event":"agent_stop","success":true}

public/images/portfolio/.omc/state/checkpoints/checkpoint-2026-05-11T07-59-27-490Z.json

@@ -1,16 +0,0 @@
-{
-  "created_at": "2026-05-11T07:59:27.489Z",
-  "trigger": "auto",
-  "active_modes": {},
-  "todo_summary": {
-    "pending": 0,
-    "in_progress": 0,
-    "completed": 0
-  },
-  "wisdom_exported": false,
-  "background_jobs": {
-    "active": [],
-    "recent": [],
-    "stats": null
-  }
-}

public/images/portfolio/.omc/state/checkpoints/checkpoint-2026-05-11T10-16-55-529Z.json

@@ -1,16 +0,0 @@
-{
-  "created_at": "2026-05-11T10:16:55.527Z",
-  "trigger": "auto",
-  "active_modes": {},
-  "todo_summary": {
-    "pending": 0,
-    "in_progress": 0,
-    "completed": 0
-  },
-  "wisdom_exported": false,
-  "background_jobs": {
-    "active": [],
-    "recent": [],
-    "stats": null
-  }
-}

public/images/portfolio/.omc/state/checkpoints/checkpoint-2026-05-11T12-31-19-986Z.json

@@ -1,16 +0,0 @@
-{
-  "created_at": "2026-05-11T12:31:19.985Z",
-  "trigger": "auto",
-  "active_modes": {},
-  "todo_summary": {
-    "pending": 0,
-    "in_progress": 0,
-    "completed": 0
-  },
-  "wisdom_exported": false,
-  "background_jobs": {
-    "active": [],
-    "recent": [],
-    "stats": null
-  }
-}

public/images/portfolio/.omc/state/checkpoints/checkpoint-2026-05-11T13-06-32-885Z.json

@@ -1,16 +0,0 @@
-{
-  "created_at": "2026-05-11T13:06:32.884Z",
-  "trigger": "auto",
-  "active_modes": {},
-  "todo_summary": {
-    "pending": 0,
-    "in_progress": 0,
-    "completed": 0
-  },
-  "wisdom_exported": false,
-  "background_jobs": {
-    "active": [],
-    "recent": [],
-    "stats": null
-  }
-}