name: disk-audit
on:
  workflow_dispatch:
jobs:
  audit:
    runs-on: nixos
    steps:
      - name: gitea storage audit as root (read-only)
        run: |
          set +e
          IMG=alpine:3.20
          docker image inspect "$IMG" >/dev/null 2>&1 || docker pull -q "$IMG" || true
          docker run --rm -v /mnt/appdata:/a:ro "$IMG" sh -c '
            echo "== gitea top-level"; du -xsh /a/gitea/* 2>&1 | sort -h
            echo "== gitea/data";     du -xsh /a/gitea/data/* 2>&1 | sort -h
            echo "== dumps count"; ls -1 /a/gitea/dumps 2>/dev/null | wc -l
            echo "== repos: owner/repo (top 40 by size)"
            du -xsh /a/gitea/data/gitea-repositories/*/* 2>/dev/null | sort -h | tail -40
            echo "== lfs"; du -xsh /a/gitea/data/lfs 2>/dev/null
            echo "== packages"; du -xsh /a/gitea/data/packages 2>/dev/null
            echo "== biggest files >100M"
            find /a/gitea -xdev -type f -size +100M -printf "%s %p\n" 2>/dev/null | sort -n | tail -25
          '