Fix cron and deploy for bridge networking

- Remove PULL_SECRETS_FROM_VAULT=0 from cron entries (incompatible
  with bridge networking, services need Vault for DB connection strings)
- Add sed fix for default mysqld.cnf bind-address in deploy script
  (99-akatsuki.cnf sets 0.0.0.0 but mysqld.cnf overrides it)
- Deploy cron config to /etc/cron.d/akatsuki on each deploy

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: cmyui

.github/workflows/deploy.yml

@@ -28,7 +28,11 @@ jobs:
 
             # Apply config changes
             cp config/mysql/99-akatsuki.cnf /etc/mysql/mysql.conf.d/99-akatsuki.cnf
+            # Ensure default mysqld.cnf doesn't override our bind-address
+            sed -i 's/^bind-address\s*=\s*127.0.0.1/bind-address = 0.0.0.0/' /etc/mysql/mysql.conf.d/mysqld.cnf
             cp config/redis/redis.conf /etc/redis/redis.conf
+            cp config/cron/akatsuki /etc/cron.d/akatsuki
+            chmod 644 /etc/cron.d/akatsuki
             cp config/vault/config.hcl /opt/vault/config.hcl
             cp config/nginx/nginx.conf /etc/nginx/nginx.conf
             cp config/nginx/sites-enabled/*.conf /etc/nginx/sites-enabled/

config/cron/akatsuki

@@ -2,10 +2,10 @@ SHELL=/bin/bash
 PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
 
 # new-cron: recalc ranks, fix donor badges, freeze timers, update caches (every 30m)
-*/30 * * * * root cd /opt/akatsuki && docker compose run --rm -e PULL_SECRETS_FROM_VAULT=0 -e APP_ENV=production --no-deps new-cron >> /opt/akatsuki/logs/new-cron.log 2>&1
+*/30 * * * * root cd /opt/akatsuki && docker compose run --rm --no-deps new-cron >> /opt/akatsuki/logs/new-cron.log 2>&1
 
 # profile-history: snapshot user stats (daily at 00:00 UTC)
-0 0 * * * root cd /opt/akatsuki && docker compose run --rm -e PULL_SECRETS_FROM_VAULT=0 -e APP_ENV=production -e APP_COMPONENT=crawler-cronjob --no-deps profile-history-service >> /opt/akatsuki/logs/profile-history-crawler.log 2>&1
+0 0 * * * root cd /opt/akatsuki && docker compose run --rm -e APP_COMPONENT=crawler-cronjob --no-deps profile-history-service >> /opt/akatsuki/logs/profile-history-crawler.log 2>&1
 
 # sql-backup: dump all tables to S3 (daily at 04:00 UTC)
 0 4 * * * root cd /opt/akatsuki/sql-backup-job && ./backup.sh >> /opt/akatsuki/logs/sql-backup.log 2>&1