deploy: Docker compose + entrypoint (pull-loop autosync), Nix revert script, .env (gitignored) for Gitea deploy token

deploy/install-kontra.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+# Install Kontra deploy on .13 — run as root (sudo bash install.sh).
+# Copies: service units, pull script; enables service + timer.
+set -euo pipefail
+
+DIR=/var/www/kontra_day
+BIN=$DIR/bin
+
+echo "== placing pull script =="
+install -m 0755 -o root -g root deploy/kontra-pull.sh $BIN/kontra-pull.sh
+
+echo "== installing systemd units =="
+install -m 0644 deploy/kontra.service /etc/systemd/system/kontra.service
+install -m 0644 deploy/kontra-pull.service /etc/systemd/system/kontra-pull.service
+install -m 0644 deploy/kontra-pull.timer  /etc/systemd/system/kontra-pull.timer
+
+echo "== daemon-reload =="
+systemctl daemon-reload
+
+echo "== enable+start kontra =="
+systemctl enable --now kontra.service || true
+systemctl start kontra.service || true
+
+echo "== enable+start pull timer =="
+systemctl enable --now kontra-pull.timer || true
+
+echo "== status =="
+systemctl --no-pager --full status kontra.service | head -15
+systemctl --no-pager list-timers kontra-pull.timer | head -5
+echo "DONE"