Codex fixes

.gitea/workflows/deploy.yaml

@@ -27,7 +27,7 @@ jobs:
           # The bind mount creates /server_storage on the host if missing.
           # Run a throwaway container to fix ownership so UID 1001 (nextjs) can write.
           docker run --rm -v /server_storage:/data alpine sh -c \
-            "chown -R 1001:1001 /data && chmod -R 755 /data"
+            "chown -R 1001:1001 /data && chmod -R go-rwx /data"
 
       - name: Run New Container
         run: |
@@ -35,5 +35,8 @@ jobs:
             --name website-container \
             --restart unless-stopped \
             -p 8080:3000 \
+            -e ANALYTICS_SALT="${{ secrets.ANALYTICS_SALT }}" \
+            -e ADMIN_DASH_URL="${{ secrets.ADMIN_DASH_URL }}" \
+            -e ADMIN_DASH_KEY="${{ secrets.ADMIN_DASH_KEY }}" \
             -v /server_storage:/server_storage \
-            my-website:latest
+            my-website:latest