add data validation

justfile

@@ -6,7 +6,19 @@ build:
     echo "Building hagfisk binary..."
     cargo build --release
 
-# Sync binary to server
+# Stop app service (must stop before DB operations)
+stop-app:
+    ssh {{host}} "systemctl --user stop hagfisk.service"
+
+# Start app service
+start-app:
+    ssh {{host}} "systemctl --user start hagfisk.service"
+
+# Restart app service
+restart-app:
+    ssh {{host}} "systemctl --user restart hagfisk.service"
+
+# Deploy and restart (safe for regular updates)
 deploy: build
     ssh -q {{host}} "rm -f {{hagfisk_dir}}/hagfisk"
     echo "Syncing binary to remote..."
@@ -16,50 +28,34 @@ deploy: build
     ssh -q {{host}} "systemctl --user daemon-reload"
     ssh -q {{host}} "systemctl --user restart hagfisk.service"
 
-# Enable and start service
-enable-now-app:
-    ssh {{host}} "systemctl --user enable --now hagfisk.service"
-
-# Start service on remote
-start-app:
+# Deploy with full re-ingest (stops service first)
+deploy-reingest: build stop-app
+    echo "Syncing binary to remote..."
+    rsync -avz --progress ./target/release/hagfisk {{host}}:{{hagfisk_dir}}/hagfisk
+    echo "Restoring SELinux contexts..."
+    ssh -t -q {{host}} "sudo restorecon -RF {{hagfisk_dir}}"
+    ssh -q {{host}} "systemctl --user daemon-reload"
+    echo "Running full re-ingest..."
+    ssh {{host}} "cd {{hagfisk_dir}} && ./hagfisk ingest --full"
+    echo "Starting service..."
     ssh {{host}} "systemctl --user start hagfisk.service"
 
-# Stop service on remote
-stop-app:
-    ssh {{host}} "systemctl --user stop hagfisk.service"
+# Manual full ingest (assumes service is stopped)
+ingest-full:
+    ssh {{host}} "cd {{hagfisk_dir}} && ./hagfisk ingest --full"
 
-# Restart service on remote
-restart-app:
-    ssh {{host}} "systemctl --user restart hagfisk.service"
-
-# Stream logs from remote
+# Stream logs from remote app
 logs-app:
     ssh {{host}} "journalctl --user -u hagfisk -f"
 
-# Show status of hagfisk
+# Show status of app
 ps-app:
     ssh {{host}} "systemctl --user status hagfisk.service"
 
-# Enable and start ingest service and timer
-enable-now-ingest:
-    ssh {{host}} "systemctl --user enable --now hagfisk-ingest.service hagfisk-ingest.timer"
-
-# Start ingest on remote
-start-ingest:
-    ssh {{host}} "systemctl --user start hagfisk-ingest.service hagfisk-ingest.timer"
-
-# Stop ingest on remote
-stop-ingest:
-    ssh {{host}} "systemctl --user stop hagfisk-ingest.service hagfisk-ingest.timer"
-
-# Restart ingest on remote
-restart-ingest:
-    ssh {{host}} "systemctl --user restart hagfisk-ingest.service hagfisk-ingest.timer"
-
-# Stream ingest logs from remote
+# Stream logs from remote ingest (manual run)
 logs-ingest:
     ssh {{host}} "journalctl --user -u hagfisk-ingest -f"
 
-# Show status of hagfisk ingest
+# Show status of ingest
 ps-ingest:
     ssh {{host}} "systemctl --user status hagfisk-ingest.service"