Fix GitHub OAuth: use admin-configured social app only

Remove duplicate provider credentials from settings.py to avoid
conflict with the Social Application configured in Django admin.
Also fix deploy script to accept SSH key via -k flag, fix CSS
import order, and use POST instead of PUT for Inertia form saves.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: mattstratton

config/settings.py

@@ -115,12 +115,10 @@
 LOGIN_REDIRECT_URL = "/manage/"
 LOGOUT_REDIRECT_URL = "/"
 
+# GitHub OAuth credentials are configured via Django Admin → Social Applications.
+# This keeps secrets out of settings and avoids duplicate provider registration.
 SOCIALACCOUNT_PROVIDERS = {
     "github": {
-        "APP": {
-            "client_id": env("GITHUB_CLIENT_ID", default=""),
-            "secret": env("GITHUB_CLIENT_SECRET", default=""),
-        },
         "SCOPE": ["user:email"],
     },
 }

deploy/deploy.sh

@@ -5,10 +5,20 @@ set -euo pipefail
 # After this, all deploys happen via GitHub Actions (push to main).
 #
 # Usage:
-#   ./deploy/deploy.sh ec2-user@YOUR_IP beta.devopsdays.org
+#   ./deploy/deploy.sh [-k keyfile] user@host domain
+#
+# Example:
+#   ./deploy/deploy.sh -k ~/.ssh/devopsdays-web-app.pem ec2-user@1.2.3.4 beta.devopsdays.org
+
+# Parse optional -k flag for SSH key
+SSH_OPTS=""
+if [ "${1:-}" = "-k" ]; then
+    SSH_OPTS="-i ${2}"
+    shift 2
+fi
 
-REMOTE="${1:?Usage: deploy.sh user@host domain}"
-DOMAIN="${2:?Usage: deploy.sh user@host domain}"
+REMOTE="${1:?Usage: deploy.sh [-k keyfile] user@host domain}"
+DOMAIN="${2:?Usage: deploy.sh [-k keyfile] user@host domain}"
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 PROJECT_DIR="$(dirname "$SCRIPT_DIR")"
 APP_DIR="/opt/devopsdays-web-app"
@@ -17,16 +27,16 @@ echo "==> Setting up ${REMOTE} for ${DOMAIN}..."
 
 # Copy only the files needed on the server (no source code!)
 echo "==> Copying deployment configs..."
-ssh "${REMOTE}" "mkdir -p ${APP_DIR}/deploy/nginx/conf.d"
+ssh ${SSH_OPTS} "${REMOTE}" "mkdir -p ${APP_DIR}/deploy/nginx/conf.d"
 
-scp "${PROJECT_DIR}/docker-compose.prod.yml" "${REMOTE}:${APP_DIR}/"
-scp "${PROJECT_DIR}/env.prod.template" "${REMOTE}:${APP_DIR}/"
-scp "${PROJECT_DIR}/deploy/nginx/nginx.conf" "${REMOTE}:${APP_DIR}/deploy/nginx/"
-scp "${PROJECT_DIR}/deploy/nginx/conf.d/app.conf" "${REMOTE}:${APP_DIR}/deploy/nginx/conf.d/"
-scp "${PROJECT_DIR}/deploy/nginx/conf.d/app-initial.conf" "${REMOTE}:${APP_DIR}/deploy/nginx/conf.d/"
+scp ${SSH_OPTS} "${PROJECT_DIR}/docker-compose.prod.yml" "${REMOTE}:${APP_DIR}/"
+scp ${SSH_OPTS} "${PROJECT_DIR}/env.prod.template" "${REMOTE}:${APP_DIR}/"
+scp ${SSH_OPTS} "${PROJECT_DIR}/deploy/nginx/nginx.conf" "${REMOTE}:${APP_DIR}/deploy/nginx/"
+scp ${SSH_OPTS} "${PROJECT_DIR}/deploy/nginx/conf.d/app.conf" "${REMOTE}:${APP_DIR}/deploy/nginx/conf.d/"
+scp ${SSH_OPTS} "${PROJECT_DIR}/deploy/nginx/conf.d/app-initial.conf" "${REMOTE}:${APP_DIR}/deploy/nginx/conf.d/"
 
 echo "==> Configuring server..."
-ssh "${REMOTE}" bash -s "${DOMAIN}" "${APP_DIR}" << 'REMOTE_SCRIPT'
+ssh ${SSH_OPTS} "${REMOTE}" bash -s "${DOMAIN}" "${APP_DIR}" << 'REMOTE_SCRIPT'
 set -euo pipefail
 DOMAIN="${1}"
 APP_DIR="${2}"

deploy/pulumi/Pulumi.prod.yaml

@@ -1,4 +1,4 @@
 config:
   aws:region: us-east-1
   devopsdays-web-app:instance_type: t3.small
-  devopsdays-web-app:key_pair_name: ""
+  devopsdays-web-app:key_pair_name: "devopsdays-web-app"