Tighten lint workflow scope

.gitea/workflows/lint.yaml

@@ -3,7 +3,7 @@ name: lint
 on:
   push:
     branches:
-      - '**'
+      - "**"
   pull_request:
   workflow_dispatch:
 
@@ -17,11 +17,22 @@ jobs:
       - name: Check formatting with Prettier
         shell: bash
         run: |
+          mapfile -t prettier_files < <(
+            git ls-files \
+              | grep -E '\.(md|json|ya?ml|html|css)$' \
+              | grep -Ev '^(\.docs/|\.zed/|errorpages/html/|homepages/(forust_files|xdfnx_files)/)'
+          )
+
+          if [ "${#prettier_files[@]}" -eq 0 ]; then
+            echo "No Prettier-managed files found."
+            exit 0
+          fi
+
           docker run --rm \
             -v "$PWD:/work" \
             -w /work \
             node:22-alpine \
-            sh -lc 'npx --yes prettier@3 --check --ignore-unknown .'
+            sh -lc 'npx --yes prettier@3 --check --ignore-unknown "$@"' sh "${prettier_files[@]}"
 
   ruff:
     runs-on: [self-hosted, linux, arch, homelab]
@@ -74,5 +85,6 @@ jobs:
           docker run --rm \
             -v "$PWD:/work" \
             -w /work \
+            --entrypoint hadolint \
             hadolint/hadolint:latest-debian \
             -c .hadolint.yaml "${dockerfiles[@]}"

.github/workflows/lint.yaml

@@ -3,7 +3,7 @@ name: lint
 on:
   push:
     branches:
-      - '**'
+      - "**"
   pull_request:
   workflow_dispatch:
 
@@ -17,11 +17,22 @@ jobs:
       - name: Check formatting with Prettier
         shell: bash
         run: |
+          mapfile -t prettier_files < <(
+            git ls-files \
+              | grep -E '\.(md|json|ya?ml|html|css)$' \
+              | grep -Ev '^(\.docs/|\.zed/|errorpages/html/|homepages/(forust_files|xdfnx_files)/)'
+          )
+
+          if [ "${#prettier_files[@]}" -eq 0 ]; then
+            echo "No Prettier-managed files found."
+            exit 0
+          fi
+
           docker run --rm \
             -v "$PWD:/work" \
             -w /work \
             node:22-alpine \
-            sh -lc 'npx --yes prettier@3 --check --ignore-unknown .'
+            sh -lc 'npx --yes prettier@3 --check --ignore-unknown "$@"' sh "${prettier_files[@]}"
 
   ruff:
     runs-on: [self-hosted, linux, arch, homelab]
@@ -74,5 +85,6 @@ jobs:
           docker run --rm \
             -v "$PWD:/work" \
             -w /work \
+            --entrypoint hadolint \
             hadolint/hadolint:latest-debian \
             -c .hadolint.yaml "${dockerfiles[@]}"

cfddns/config.json.example

@@ -7,7 +7,7 @@
       "api_key": {
         "api_key": "api_key_here",
         "account_email": "your_email_here"
-      }
+      },
       "zone_id": "your_zone-id",
       "subdomains": [
         { "name": "", "proxied": true },

headscale/config/policy.json.example

@@ -1,8 +1,6 @@
 {
   "groups": {
-        "group:admin": [
+    "group:admin": ["admin@"],
-            "admin@"
-        ],
     "group:users": []
   },
   "tagOwners": {},
@@ -15,12 +13,8 @@
         "open": true
       },
       "action": "accept",
-            "src": [
+      "src": ["autogroup:member"],
-                "autogroup:member"
+      "dst": ["autogroup:self:*"]
-            ],
-            "dst": [
-                "autogroup:self:*"
-            ]
     }
   ],
   "ssh": []