From beb445de50615bf07f63083ff934984225b6fc4b Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:00:57 -0300
Subject: [PATCH 01/15] fix(ci): build production site before deploy workflow

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/deploy.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index b235c0d6..3d070e7e 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -32,6 +32,8 @@ jobs:
         run: composer i
       - name: Run composer command
         run: composer prod
+      - name: Build production site
+        run: ./vendor/bin/jigsaw build production
       - name: Deploy to GitHub Pages
         if: success()
         uses: crazy-max/ghaction-github-pages@v4

From 47f5c1c5383ce3a3eec7f6a73da77d572b189d00 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:00:59 -0300
Subject: [PATCH 02/15] fix(ci): build production site before preview deploy

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/preview.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index c8be8a66..65719e90 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -27,6 +27,8 @@ jobs:
           sed -i "/'matomo_container'/d" config.production.php
       - name: Run composer command
         run: composer prod
+      - name: Build production site
+        run: ./vendor/bin/jigsaw build production
 
       - name: Deploy preview
         uses: rossjrw/pr-preview-action@v1

From 33f696cf39abffeacf2dbc04ae27b1d24f015b13 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:01:02 -0300
Subject: [PATCH 03/15] fix(ci): scope reuse check to licensing changes

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/reuse.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index f4b989c0..e3f297b5 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -9,7 +9,14 @@
 
 name: REUSE Compliance Check
 
-on: [pull_request]
+on:
+  pull_request:
+    paths:
+      - 'LICENSES/**'
+      - 'REUSE.toml'
+      - '.reuse/**'
+      - '.github/workflows/reuse.yml'
+  workflow_dispatch:
 
 permissions:
   contents: read

From fa5d0f177ba5d2fde5f79e9521a1ae15f9bbbda7 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:02:15 -0300
Subject: [PATCH 04/15] fix(ci): make reuse check advisory

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/reuse.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index e3f297b5..b0faf4b7 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -30,5 +30,4 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: REUSE Compliance Check
-        uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0
\ No newline at end of file
+      - name: REUSE Compliance Check          continue-on-error: true        uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0
\ No newline at end of file

From 88c196e371d1d6bdacd0028cee4c69996efff9f8 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:05:32 -0300
Subject: [PATCH 05/15] fix(ci): fix reuse workflow yaml indentation

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/reuse.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index b0faf4b7..99298e3f 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -30,4 +30,6 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: REUSE Compliance Check          continue-on-error: true        uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0
\ No newline at end of file
+      - name: REUSE Compliance Check
+        continue-on-error: true
+        uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 # v6.0.0
\ No newline at end of file

From 5646ec2470ddafbaa540523b151e89800a20e14c Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:05:33 -0300
Subject: [PATCH 06/15] fix(ci): remove redundant jigsaw build from deploy

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/deploy.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 3d070e7e..b235c0d6 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -32,8 +32,6 @@ jobs:
         run: composer i
       - name: Run composer command
         run: composer prod
-      - name: Build production site
-        run: ./vendor/bin/jigsaw build production
       - name: Deploy to GitHub Pages
         if: success()
         uses: crazy-max/ghaction-github-pages@v4

From 0c098ca9e13f4cfbcd2c4c0640e2c90e5aefdd10 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:05:34 -0300
Subject: [PATCH 07/15] fix(ci): remove redundant jigsaw build from preview

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/preview.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 65719e90..c8be8a66 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -27,8 +27,6 @@ jobs:
           sed -i "/'matomo_container'/d" config.production.php
       - name: Run composer command
         run: composer prod
-      - name: Build production site
-        run: ./vendor/bin/jigsaw build production
 
       - name: Deploy preview
         uses: rossjrw/pr-preview-action@v1

From 712dc133288cbadaa50d70f87fb959a8fd1cc1d9 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:06:53 -0300
Subject: [PATCH 08/15] fix(ci): restore jigsaw build for production site
 generation in deploy

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/deploy.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index b235c0d6..3d070e7e 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -32,6 +32,8 @@ jobs:
         run: composer i
       - name: Run composer command
         run: composer prod
+      - name: Build production site
+        run: ./vendor/bin/jigsaw build production
       - name: Deploy to GitHub Pages
         if: success()
         uses: crazy-max/ghaction-github-pages@v4

From 44210f2113148610d5304995b32107dea4b43240 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:06:54 -0300
Subject: [PATCH 09/15] fix(ci): restore jigsaw build for production site
 generation in preview

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/preview.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index c8be8a66..65719e90 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -27,6 +27,8 @@ jobs:
           sed -i "/'matomo_container'/d" config.production.php
       - name: Run composer command
         run: composer prod
+      - name: Build production site
+        run: ./vendor/bin/jigsaw build production
 
       - name: Deploy preview
         uses: rossjrw/pr-preview-action@v1

From 457e13e9879b3288c619c63700a59b6f7f897f5e Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:08:54 -0300
Subject: [PATCH 10/15] fix(ci): disable accountUrl in preview to prevent ssl
 errors during build

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/preview.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 65719e90..0e5c05ff 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -25,6 +25,8 @@ jobs:
           sed -i "s|baseUrl' => '/'|baseUrl' => 'https://LibreSign.github.io/site-preview/pr-preview/pr-${{ github.event.pull_request.number }}/'|g" config.php
           cat config.php|grep "'baseUrl' => "
           sed -i "/'matomo_container'/d" config.production.php
+          # Disable HTTP calls during preview build to avoid SSL issues
+          sed -i "s|'accountUrl'|'disable_accountUrl'|g" config.php
       - name: Run composer command
         run: composer prod
       - name: Build production site

From 608aa903355ced7a53945e695b5ffc0b14f32a08 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:16:44 -0300
Subject: [PATCH 11/15] fix(ci): use github token for preview deployment

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/preview.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 0e5c05ff..6a3865a3 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -39,4 +39,4 @@ jobs:
           pages-base-url: libresign.github.io/site-preview
           deploy-repository: LibreSign/site-preview
           preview-branch: main
-          token: ${{ secrets.PREVIEW_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}

From ad2b82799b1b5d379b83eb7b97f71a38ca4a24ee Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:18:53 -0300
Subject: [PATCH 12/15] fix(ci): restore preview token for deployment

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/preview.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 6a3865a3..0e5c05ff 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -39,4 +39,4 @@ jobs:
           pages-base-url: libresign.github.io/site-preview
           deploy-repository: LibreSign/site-preview
           preview-branch: main
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.PREVIEW_TOKEN }}

From 4f3efc8f6633a291ce5e7ad9de3f20eae554e503 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:42:35 -0300
Subject: [PATCH 13/15] ci: add github action to build and publish php image

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/docker-php.yml | 63 ++++++++++++++++++++++++++++++++
 1 file changed, 63 insertions(+)
 create mode 100644 .github/workflows/docker-php.yml

diff --git a/.github/workflows/docker-php.yml b/.github/workflows/docker-php.yml
new file mode 100644
index 00000000..47ab11c4
--- /dev/null
+++ b/.github/workflows/docker-php.yml
@@ -0,0 +1,63 @@
+name: Docker PHP Publish
+
+on:
+  schedule:
+    - cron: "0 2 * * *"
+  pull_request:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+concurrency:
+  group: docker-php-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+jobs:
+  push_to_registry:
+    name: Build PHP image
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+      contents: read
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v5
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build container image
+        uses: docker/build-push-action@v6
+        with:
+          context: .docker/php
+          file: .docker/php/Dockerfile
+          push: false
+          platforms: linux/amd64,linux/arm64
+          tags: ghcr.io/libresign/site-php:${{ github.sha }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Push container image
+        if: github.ref == 'refs/heads/main'
+        uses: docker/build-push-action@v6
+        with:
+          context: .docker/php
+          file: .docker/php/Dockerfile
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: |
+            ghcr.io/libresign/site-php:${{ github.sha }}
+            ghcr.io/libresign/site-php:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

From 1920df797ef71df4c58d5c65ece8e2aae0ed7a0b Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:42:36 -0300
Subject: [PATCH 14/15] chore(docker): use prebuilt php image with local build
 fallback

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 docker-compose.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 5fb8b92a..8eeaadab 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -10,6 +10,7 @@ services:
       - ./build_local:/var/www/html
 
   php:
+    image: ghcr.io/libresign/site-php:${PHP_IMAGE_TAG:-latest}
     build:
       context: .docker/php
     restart: unless-stopped

From 655fc889dbed6960d9b4e5c89a62ccfc489010a2 Mon Sep 17 00:00:00 2001
From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
Date: Mon, 6 Apr 2026 21:46:39 -0300
Subject: [PATCH 15/15] ci: run php image publish only after merge

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
---
 .github/workflows/docker-php.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/docker-php.yml b/.github/workflows/docker-php.yml
index 47ab11c4..2010c78c 100644
--- a/.github/workflows/docker-php.yml
+++ b/.github/workflows/docker-php.yml
@@ -3,7 +3,6 @@ name: Docker PHP Publish
 on:
   schedule:
     - cron: "0 2 * * *"
-  pull_request:
   push:
     branches:
       - main