adamf/web_server
1
1
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects Releases Wiki Activity
802 Commits 3 Branches 0 Tags
12967c573b49b901da0f4da08ee5d25da1d2ccfa
Commit Graph

3 Commits

Author SHA1 Message Date
Adam French
494f61f9c6 Reduce secret syncing to just .env
All checks were successful
Deploy with Docker Compose / deploy (push) Successful in 7s
Details 
Strip hardcoded secrets from gitea/config/app.ini (already injected
via GITEA__ env vars) and commit it to git. Add download.sh to fetch
the act_runner binary on demand instead of syncing it. Everything else
(searxng settings, certbot certs, runner registration, Spotify tokens)
is generated at runtime.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-04-07 14:22:50 +01:00
Adam French
4c8573767d Secure gitea-runner: remove tracked secrets, use SSH for deploy
Some checks failed
Deploy with Docker Compose / deploy (push) Failing after 1s
Details 
- Untrack .runner (contains registration token), act_runner binary, and nohup.out
- Add gitea-runner sensitive files to .gitignore
- Auto-register runner from env var if .runner is missing
- Switch deploy workflow git pull from HTTP to SSH

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-04-07 13:19:45 +01:00
Adam French
4d16dd8d17 Use binary gitea runner to avoid stress
Some checks failed
Deploy with Docker Compose / deploy (push) Has been cancelled
Details
2026-04-07 13:15:35 +01:00