chore: add wp-cli maintenance override

2026-07-23 21:22:21 +02:00
parent 472b8616b4
commit f75bce3dea
7 changed files with 83 additions and 0 deletions
@@ -56,3 +56,23 @@ grep -q "location ^~ /wp-content/mu-plugins/" /workspace/nginx/proxy-routes.conf
    echo "NGINX must hide the mu-plugins directory from public probing." >&2
    exit 1
 }
+
+[ -f /workspace/docker-compose.maintenance.yml ] || {
+    echo "The maintenance Compose override must exist for controlled wp-cli egress." >&2
+    exit 1
+}
+
+grep -q "^[[:space:]]*wp-cli:" /workspace/docker-compose.maintenance.yml || {
+    echo "The maintenance override must target only the wp-cli service." >&2
+    exit 1
+}
+
+grep -q "^[[:space:]]*-[[:space:]]*data$" /workspace/docker-compose.maintenance.yml || {
+    echo "The maintenance wp-cli service must keep database network access." >&2
+    exit 1
+}
+
+grep -q "^[[:space:]]*-[[:space:]]*web$" /workspace/docker-compose.maintenance.yml || {
+    echo "The maintenance wp-cli service must explicitly opt into the web network." >&2
+    exit 1
+}