4 Commits

Include renames

Author	SHA1	Message	Date
mram	44a8e9fbdc	CFG_VER/APP_VER in the env file: invalid configs replaced, updates follow APP_VER (dev/stable/pin)	2026-09-21 09:28:29 +02:00
mram	9481fd8418	Embed rotated release public key; pin compose example to v0.1.4	2026-09-20 22:37:28 +02:00
mram	08d02d8fa8	Embed release public key; rename signing secret to RELEASE_SIGNING_KEY	2026-09-20 22:15:19 +02:00
mram	e363c9e4e4	Native Windows deployment: config file, service, signed auto-update ... - internal/config: .env-style config file (gpu-turnstile.env next to the exe, -config flag or GPU_TURNSTILE_CONFIG); process env overrides file. - internal/service: Windows service via golang.org/x/sys/windows/svc — graceful SCM stop, 'service install/remove' commands, restart-on-failure recovery (also applies staged updates). First external dependency, Windows-only; Linux/Docker build unaffected (go.mod stays at 1.23). - internal/update: polls the Gitea releases API, verifies the Ed25519 signature of the downloaded binary against an embedded public key (openssl-signed by CI), swaps it in next to the running exe, and once the GPU lock is idle exits with code 3 so service recovery restarts onto the new version. Dev builds and empty pubkey never update. - CI: tag builds additionally produce gpu-turnstile.exe + .sig + .sha256 attached to a Gitea release. - LOG_FILE env var so the service has somewhere to log.	2026-09-20 21:33:29 +02:00