From aba353cee4e63475d72286270e0b3bbc9045b60f Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 9 Mar 2026 04:01:06 +0000
Subject: [PATCH 1/3] Initial plan


From c9a89721b4b4ded19f71d4f36f6b0aa0fb72ad82 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 9 Mar 2026 04:05:07 +0000
Subject: [PATCH 2/3] Prevent dev from pushing to Docker Hub latest; add
 PUBLIC_ONLY to unraid public XML

Co-authored-by: Aedankerr <56336929+Aedankerr@users.noreply.github.com>
---
 .github/workflows/docker.yml          | 2 --
 unraid/unraid-site-manager-public.xml | 1 +
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index f221e53..d2be10f 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -4,7 +4,6 @@ on:
   push:
     branches:
       - main
-      - dev
   workflow_dispatch:
 
 jobs:
@@ -31,7 +30,6 @@ jobs:
           images: aedankerr/site-manager
           tags: |
             type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
-            type=raw,value=dev,enable=${{ github.ref == 'refs/heads/dev' }}
             type=sha
 
       - name: Build and push image
diff --git a/unraid/unraid-site-manager-public.xml b/unraid/unraid-site-manager-public.xml
index ab658b3..328f24a 100644
--- a/unraid/unraid-site-manager-public.xml
+++ b/unraid/unraid-site-manager-public.xml
@@ -41,5 +41,6 @@ Default ports: Admin (3010) + Public (3011)</Overview>
   <Config Name="Uploads" Target="/app/uploads" Default="/mnt/user/appdata/site-manager/uploads" Mode="ro" Description="Uploaded images (read-only). IMPORTANT: Use the SAME path as your Site Manager Admin container!" Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/site-manager/uploads</Config>
   <Config Name="DB Path" Target="DB_PATH" Default="/app/data/site.db" Mode="" Description="Path to the SQLite database inside the container (leave as default)" Type="Variable" Display="advanced" Required="false" Mask="false">/app/data/site.db</Config>
   <Config Name="Public Port (internal)" Target="PUBLIC_PORT" Default="3011" Mode="" Description="Internal container port. DO NOT CHANGE this value. To use a different port, change the WebUI Port above instead." Type="Variable" Display="advanced" Required="true" Mask="false">3011</Config>
+  <Config Name="Public Only Mode" Target="PUBLIC_ONLY" Default="true" Mode="" Description="Forces read-only public mode. Set to true for this container (auto-detected from read-only volume mount, but recommended to set explicitly)." Type="Variable" Display="advanced" Required="false" Mask="false">true</Config>
   <Config Name="Node Environment" Target="NODE_ENV" Default="production" Mode="" Description="Node environment (leave as production)" Type="Variable" Display="advanced" Required="false" Mask="false">production</Config>
 </Container>
\ No newline at end of file

From 4b70d20ee2e6f97d1803cf48dcd0a9f97f8061be Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 9 Mar 2026 04:06:50 +0000
Subject: [PATCH 3/3] Restore dev tag on Docker Hub while keeping latest
 guarded to main only

Co-authored-by: Aedankerr <56336929+Aedankerr@users.noreply.github.com>
---
 .github/workflows/docker.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index d2be10f..f221e53 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - main
+      - dev
   workflow_dispatch:
 
 jobs:
@@ -30,6 +31,7 @@ jobs:
           images: aedankerr/site-manager
           tags: |
             type=raw,value=latest,enable=${{ github.ref == 'refs/heads/main' }}
+            type=raw,value=dev,enable=${{ github.ref == 'refs/heads/dev' }}
             type=sha
 
       - name: Build and push image