Enhance deployment script: Implement conditional service restart logic for improved handling of non-root user deployments. Update CI workflow to ensure proper execution of deploy.sh after backup process.

deploy.sh

@@ -26,6 +26,17 @@ mkdir -p public || true
 cp -R dist/* public/ || { err "copy dist failed"; exit 1; }
 
 log "Restarting service miriamgemeinde..."
-sudo systemctl restart miriamgemeinde || { err "service restart failed"; exit 1; }
+if [ "${EUID:-$(id -u)}" -eq 0 ]; then
+  systemctl restart miriamgemeinde || { err "service restart failed"; exit 1; }
+else
+  # Non-interactive deploys (CI) must not prompt for a sudo password.
+  # Configure on the server (recommended):
+  #   sudo visudo -f /etc/sudoers.d/miriamgemeinde
+  #   torsten ALL=NOPASSWD:/bin/systemctl restart miriamgemeinde,/bin/systemctl status miriamgemeinde
+  sudo -n systemctl restart miriamgemeinde || {
+    err "service restart failed (no password prompt). Configure passwordless sudo for 'systemctl restart miriamgemeinde' or run deploy as root."
+    exit 1
+  }
+fi
 
 log "Deployment completed successfully."