website/docs: run once and always provisioners