Add authenticated GitHub PAT for Forgejo mirror sync #269

Merged
eblume merged 2 commits from feature/mirror-github-pat into main 2026-02-25 20:20:24 -08:00

2 commits

Author SHA1 Message Date
f2eb1a1292 Address PR #269 feedback: fix PAT permissions, add task to index
- Fine-grained PATs need no explicit permissions for public repo
  read-only access — correct the how-to doc
- Add mirror-update-pats to mise-tasks reference

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-25 20:19:15 -08:00
d213dfbc18 Add authenticated GitHub PAT for Forgejo mirror sync
GitHub tightened unauthenticated rate limits in May 2025. Add a
GitHub fine-grained PAT (stored in 1Password) to all mirror fetches:

- mirror-create: auto-includes PAT for GitHub upstreams at creation
- mirror-update-pats: new task to push PAT to all existing mirrors
  via SSH git config rewrite on indri
- app.ini.j2: explicit [mirror] section (8h default, 10m minimum)
- manage-forgejo-mirrors how-to: full PAT rotation procedure

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-25 20:11:19 -08:00