fix rsync permissions: setup-server.sh with setgid dirs, exclude .claude/.pi

justfile

@@ -37,6 +37,8 @@ deploy:
         --exclude '*.md' \
         --exclude '.git*' \
         --exclude '.jj' \
+        --exclude '.claude' \
+        --exclude '.pi' \
         --exclude '.DS_Store' \
         --exclude 'storage/backup_*' \
         --exclude 'storage/fixtures' \
@@ -48,12 +50,12 @@ deploy:
         --exclude 'var/cache/*' \
         --exclude 'var/logs/*' \
         ./ posterg:/var/www/posterg/
-    ssh posterg "cd /var/www/posterg && \
-                 mkdir -p var/{cache,logs,tmp} && \
-                 chown -R www-data:posterg . && \
-                 chmod -R 755 . && \
-                 chmod -R 775 var/ storage/ && \
-                 chmod 660 storage/*.db 2>/dev/null || true"
+    ssh posterg "mkdir -p /var/www/posterg/var/{cache,logs,tmp}"
+
+[group('deploy')]
+setup-server:
+    rsync -v scripts/setup-server.sh posterg:/tmp/setup-server.sh
+    ssh posterg "sudo DEPLOY_USER=$(ssh -G posterg | awk '/^user / {print $2}') bash /tmp/setup-server.sh"
 
 [group('deploy')]
 deploy-db: