From da2c58ae8db59efdee3f094954b8f7e9cde8b16c Mon Sep 17 00:00:00 2001
From: root <root@truenas.local>
Date: Wed, 10 Jun 2026 20:51:44 -0400
Subject: [PATCH] automated update: 2026-06-10 20:51:44

---
 .github/dependabot.yml        |  7 +++++++
 .github/workflows/lint.yml    | 20 ++++++++++++++++++++
 .github/workflows/release.yml | 34 +++++++++++++++++++++++++---------
 Dockerfile                    |  7 ++++---
 4 files changed, 56 insertions(+), 12 deletions(-)
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/workflows/lint.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..8bde633
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+version: 2
+updates:
+  - package-ecosystem: "docker"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
new file mode 100644
index 0000000..dee9f53
--- /dev/null
+++ b/.github/workflows/lint.yml
@@ -0,0 +1,20 @@
+name: Lint Python
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Run Ruff
+        uses: astral-sh/ruff-action@v3
+        with:
+          args: "check" # Can change to "check --fix" to automatically fix issues
+
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 16ad03e..ee42391 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,23 +1,22 @@
-name: Release
+name: Create GitHub Release
 
 on:
   push:
-    tags:
-      - "v*"
+    tags: [ 'v*' ]
   workflow_dispatch:
     inputs:
       version:
-        description: "Version to release (e.g. 0.1.0)"
+        description: 'Version to release (e.g., 1.0.0)'
         required: true
-        default: "0.1.0"
-
-permissions:
-  contents: write
 
 jobs:
   release:
-    name: Create GitHub Release
+    name: Create GitHub Release & Build Image
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # Needed for creating releases
+      packages: write # Needed for pushing to GHCR
+
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -80,3 +79,20 @@ jobs:
               draft: false,
               prerelease: false,
             });
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          push: true
+          tags: |
+            ghcr.io/sudolulo/if-curator-headless:latest
+            ghcr.io/sudolulo/if-curator-headless:${{ steps.tag.outputs.TAG }}
+
diff --git a/Dockerfile b/Dockerfile
index 578d2fb..09b5a58 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -20,14 +20,15 @@ RUN curl -LsSf https://astral.sh/uv/install.sh | sh \
 
 WORKDIR /app
 
-# Clone your specific repo
+# Clone your repo (ensure this repo has the updated cli.py locally!)
 RUN git clone --depth 1 https://github.com/sudolulo/if_curator_headless.git . \
     && uv sync --extra gpu \
     && uv add croniter \
     && uv cache clean
 
-# Permissions for entrypoint
-RUN chmod +x entrypoint.sh
+# Copy helper scripts
+COPY entrypoint.sh scheduler.py /app/
+RUN chmod +x /app/entrypoint.sh
 
 # Setup non-root user and persistent model paths
 RUN groupadd -g 568 apps \