Fix CORS proxy deploy workflow (#2049)

## Motivation for the change, related issues

The CORS proxy deploy workflow isn't able to find the files it checked
out in order to sync them to the dedicated proxy site.

## Implementation details

This PR fixes multiple incorrect paths, tightens command line params,
and restores some missing bash var declarations in order to fix
deployment of the dedicated CORS proxy.

## Testing Instructions (or ideally a Blueprint)

Allow dispatching this branch's version of the workflow and trigger the
workflow manually to test.

.github/workflows/deploy-cors-proxy.yml

@@ -29,8 +29,16 @@ jobs:
         steps:
             - uses: actions/checkout@v4
               with:
-                  sparse-checkout: packages/playground/php-cors-proxy
+                  sparse-checkout: |
+                      packages/playground/php-cors-proxy
                       packages/playground/php-cors-proxy-deployment
+                  sparse-checkout-cone-mode: false
+
+            - name: Observe working directory contents
+              shell: bash
+              run: |
+                  pwd
+                  ls -laR
 
             - name: Deploy to CORS proxy server
               shell: bash
@@ -43,8 +51,8 @@ jobs:
 
                   # CORS proxy files
                   rsync --verbose --archive --compress -e "ssh -i ~/.ssh/id_ed25519" \
-                    --include '*/' --include '*.php' --exclude '*' \
-                    --delete --prune-empty-dirs \
+                    --exclude 'tests/' --include '*/' --include '*.php' --exclude '*' \
+                    --delete --delete-excluded --prune-empty-dirs \
                     packages/playground/php-cors-proxy/ \
                     ${{ secrets.DEPLOY_CORS_PROXY_TARGET_USER }}@${{ secrets.DEPLOY_WEBSITE_TARGET_HOST }}:'~/updated-proxy-files'
 

packages/playground/php-cors-proxy-deployment/apply-update.sh

@@ -2,6 +2,14 @@
 
 set -euo pipefail
 
+# Explicitly use the site's declared PHP version.
+# Otherwise, we've seen this defaulting to older versions which can break our scripts.
+SITE_PHP="/usr/local/php${PHP_VERSION}/bin/php"
+SITE_API_BASE="$( "$SITE_PHP" -r 'require "/scripts/env.php"; echo SITE_API_BASE;')"
+
+echo Adding config file to updated proxy files
+cp ~/cors-proxy-deployment/cors-proxy-config.php ~/updated-proxy-files/
+
 echo Syncing staged files to production
 rsync -av --delete --no-perms --omit-dir-times ~/updated-proxy-files/ /srv/htdocs/
 
@@ -14,6 +22,6 @@ curl -sS -X POST -H "Auth: $ATOMIC_SITE_API_KEY" "$SITE_API_BASE/edge-cache/$ATO
 echo Applying latest CORS proxy rate-limiting schema
 # NOTE: This will reset rate-limiting token buckets, but that should be tolerable
 # as long as we're generally discouraging abuse of the proxy.
-cat ~/website-deployment/cors-proxy-rate-limiting-table.sql | mysql --database="$DB_NAME"
+cat ~/cors-proxy-deployment/cors-proxy-rate-limiting-table.sql | mysql --database="$DB_NAME"
 
 echo Done!