Add IaC for Forgejo Actions secrets via Ansible

New `forgejo_actions_secrets` role syncs repository-level Actions secrets
from 1Password to Forgejo via the Forgejo API. This replaces the previous
manual process of copying secrets from 1Password to Forgejo UI.

Requires a one-time manual setup of a Forgejo PAT with write:repository
scope, stored in 1Password as the `api-token` field.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-02-04 09:09:03 -08:00
commit 64a99071e3
5 changed files with 97 additions and 6 deletions

View file

@ -0,0 +1 @@
Add IaC for Forgejo Actions secrets via new `forgejo_actions_secrets` Ansible role, syncing repository secrets from 1Password to Forgejo API