From 50cb2f2706b1fa29355f63a5a3d35bd1953ad59a Mon Sep 17 00:00:00 2001
From: andre <andregeissler@posteo.de>
Date: Sat, 20 Dec 2025 19:05:50 +0100
Subject: [PATCH] .gitea/workflows/update.yml aktualisiert

---
 .gitea/workflows/update.yml | 47 +++++++++++++++++++++++++++++--------
 1 file changed, 37 insertions(+), 10 deletions(-)

diff --git a/.gitea/workflows/update.yml b/.gitea/workflows/update.yml
index f11b7e4..23c6181 100644
--- a/.gitea/workflows/update.yml
+++ b/.gitea/workflows/update.yml
@@ -1,15 +1,42 @@
-name: CI
+name: Host Maintenance
 
 on:
   schedule:
-    - cron: "0 18 * * *"
+    - cron: "0 3 * * *"   # täglich 03:00
+  workflow_dispatch:      # manuell startbar
+
 jobs:
-  test:
-    runs-on: gitea-runner
+  maintenance:
+    name: Update host system
+    runs-on: host   # MUSS exakt zum Runner-Label passen
+
     steps:
-      - run:
-          hostname
-          cat /etc/debian_version
-          apt update
-          apt -y upgrade
-          echo "finished"
\ No newline at end of file
+      # --- Debug / Sicherheit ---
+      - name: Show workflow context
+        run: |
+          echo "Branch:   $GITEA_REF_NAME"
+          echo "Commit:   $GITEA_SHA"
+          echo "Runner:   $(hostname)"
+          echo "User:     $(whoami)"
+          echo "Date:     $(date)"
+          echo "Kernel:   $(uname -a)"
+
+      # --- Sicherheitsbremse ---
+      - name: Ensure correct branch
+        run: |
+          if [ "$GITEA_REF_NAME" != "main" ]; then
+            echo "❌ This workflow must run on main only"
+            exit 1
+          fi
+
+      # --- System Update ---
+      - name: Update packages
+        run: |
+          sudo apt update
+          sudo apt -y upgrade
+
+      # --- Optional: Aufräumen ---
+      - name: Cleanup
+        run: |
+          sudo apt -y autoremove
+          sudo apt -y autoclean