eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Expose Forgejo publicly at forge.eblu.me #278

Merged
eblume merged 14 commits from feature/forge-public into main 2026-03-03 08:40:42 -08:00
Conversation 0 Commits 14 Files changed 49 +54 -54
29 changed files with 54 additions and 54 deletions
Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 538a8cf6c1 - Show all commits

Rename HTTPS forge.ops.eblu.me → forge.eblu.me across codebase

Prev Next 
Update all HTTPS references to use the new public domain. This
touches workflows, ArgoCD manifests, Ansible, mise-tasks, NixOS
config, and documentation (~29 files).

Deliberately kept as forge.ops.eblu.me:
- SSH repoURLs in argocd/apps/ (SSH stays tailnet-only)
- containers/*/Dockerfile and *.nix (internal CI efficiency)
- Caddy services table in routing.md
- Internal URL references in forgejo.md

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Erich Blume 2026-03-03 07:57:48 -08:00
commit 538a8cf6c1

20
.forgejo/workflows/build-blumeops.yaml
View file

@ -11,7 +11,7 @@
# 3. The workflow creates a release with attached artifacts # 3. The workflow creates a release with attached artifacts
# #
# Documentation asset URL: # Documentation asset URL:
# https://forge.ops.eblu.me/eblume/blumeops/releases/download/<tag>/docs-<version>.tar.gz # https://forge.eblu.me/eblume/blumeops/releases/download/<tag>/docs-<version>.tar.gz
name: Build BlumeOps name: Build BlumeOps
@ -46,7 +46,7 @@ jobs:
# Fetch latest release # Fetch latest release
echo "Fetching latest release..." echo "Fetching latest release..."
LATEST=$(curl -s "https://forge.ops.eblu.me/api/v1/repos/eblume/blumeops/releases/latest" | jq -r '.tag_name // empty' || true) LATEST=$(curl -s "https://forge.eblu.me/api/v1/repos/eblume/blumeops/releases/latest" | jq -r '.tag_name // empty' || true)
if [ -z "$LATEST" ]; then if [ -z "$LATEST" ]; then
LATEST="v0.0.0" LATEST="v0.0.0"
@ -94,9 +94,9 @@ jobs:
esac esac
# Check if this version already exists # Check if this version already exists
if curl -sf "https://forge.ops.eblu.me/api/v1/repos/eblume/blumeops/releases/tags/$VERSION" > /dev/null 2>&1; then if curl -sf "https://forge.eblu.me/api/v1/repos/eblume/blumeops/releases/tags/$VERSION" > /dev/null 2>&1; then
echo "Error: Release $VERSION already exists" echo "Error: Release $VERSION already exists"
echo "See: https://forge.ops.eblu.me/eblume/blumeops/releases/tag/$VERSION" echo "See: https://forge.eblu.me/eblume/blumeops/releases/tag/$VERSION"
exit 1 exit 1
fi fi
@ -181,7 +181,7 @@ jobs:
echo "Download \`$TARBALL\` and configure the quartz container with:" echo "Download \`$TARBALL\` and configure the quartz container with:"
echo "" echo ""
echo "\`\`\`" echo "\`\`\`"
echo "DOCS_RELEASE_URL=https://forge.ops.eblu.me/eblume/blumeops/releases/download/$VERSION/$TARBALL" echo "DOCS_RELEASE_URL=https://forge.eblu.me/eblume/blumeops/releases/download/$VERSION/$TARBALL"
echo "\`\`\`" echo "\`\`\`"
} > /tmp/release_body.txt } > /tmp/release_body.txt
@ -197,7 +197,7 @@ jobs:
-H "Content-Type: application/json" \ -H "Content-Type: application/json" \
-H "Authorization: token $GITHUB_TOKEN" \ -H "Authorization: token $GITHUB_TOKEN" \
-d "$RELEASE_DATA" \ -d "$RELEASE_DATA" \
"https://forge.ops.eblu.me/api/v1/repos/eblume/blumeops/releases") "https://forge.eblu.me/api/v1/repos/eblume/blumeops/releases")
echo "API Response: $RELEASE_RESPONSE" echo "API Response: $RELEASE_RESPONSE"
@ -217,7 +217,7 @@ jobs:
-H "Content-Type: application/gzip" \ -H "Content-Type: application/gzip" \
-H "Authorization: token $GITHUB_TOKEN" \ -H "Authorization: token $GITHUB_TOKEN" \
--data-binary "@$TARBALL" \ --data-binary "@$TARBALL" \
"https://forge.ops.eblu.me/api/v1/repos/eblume/blumeops/releases/$RELEASE_ID/assets?name=$TARBALL") "https://forge.eblu.me/api/v1/repos/eblume/blumeops/releases/$RELEASE_ID/assets?name=$TARBALL")
echo "Upload Response: $UPLOAD_RESPONSE" echo "Upload Response: $UPLOAD_RESPONSE"
echo "" echo ""
@ -228,7 +228,7 @@ jobs:
VERSION="${{ steps.version.outputs.version }}" VERSION="${{ steps.version.outputs.version }}"
TARBALL="docs-${VERSION}.tar.gz" TARBALL="docs-${VERSION}.tar.gz"
DEPLOYMENT_FILE="argocd/manifests/docs/deployment.yaml" DEPLOYMENT_FILE="argocd/manifests/docs/deployment.yaml"
RELEASE_URL="https://forge.ops.eblu.me/eblume/blumeops/releases/download/${VERSION}/${TARBALL}" RELEASE_URL="https://forge.eblu.me/eblume/blumeops/releases/download/${VERSION}/${TARBALL}"
echo "Updating $DEPLOYMENT_FILE with new release URL..." echo "Updating $DEPLOYMENT_FILE with new release URL..."
yq -i "(.spec.template.spec.containers[0].env[] | select(.name == \"DOCS_RELEASE_URL\")).value = \"${RELEASE_URL}\"" "$DEPLOYMENT_FILE" yq -i "(.spec.template.spec.containers[0].env[] | select(.name == \"DOCS_RELEASE_URL\")).value = \"${RELEASE_URL}\"" "$DEPLOYMENT_FILE"
@ -307,7 +307,7 @@ jobs:
echo "================================================" echo "================================================"
echo "" echo ""
echo "Release URL:" echo "Release URL:"
echo " https://forge.ops.eblu.me/eblume/blumeops/releases/tag/$VERSION" echo " https://forge.eblu.me/eblume/blumeops/releases/tag/$VERSION"
echo "" echo ""
echo "Asset URL (for DOCS_RELEASE_URL ConfigMap):" echo "Asset URL (for DOCS_RELEASE_URL ConfigMap):"
echo " https://forge.ops.eblu.me/eblume/blumeops/releases/download/$VERSION/$TARBALL" echo " https://forge.eblu.me/eblume/blumeops/releases/download/$VERSION/$TARBALL"

6
.forgejo/workflows/cv-deploy.yaml
View file

@ -30,7 +30,7 @@ jobs:
if [ "$INPUT_VERSION" = "latest" ]; then if [ "$INPUT_VERSION" = "latest" ]; then
echo "Resolving latest CV package version..." echo "Resolving latest CV package version..."
VERSION=$(curl -s "https://forge.ops.eblu.me/api/v1/packages/eblume?type=generic&q=cv" \ VERSION=$(curl -s "https://forge.eblu.me/api/v1/packages/eblume?type=generic&q=cv" \
| jq -r '[.[] | select(.name == "cv")] | sort_by(.version) | last | .version // empty') | jq -r '[.[] | select(.name == "cv")] | sort_by(.version) | last | .version // empty')
if [ -z "$VERSION" ]; then if [ -z "$VERSION" ]; then
@ -48,7 +48,7 @@ jobs:
# Verify the package exists # Verify the package exists
TARBALL="cv-${VERSION}.tar.gz" TARBALL="cv-${VERSION}.tar.gz"
PACKAGE_URL="https://forge.ops.eblu.me/api/packages/eblume/generic/cv/${VERSION}/${TARBALL}" PACKAGE_URL="https://forge.eblu.me/api/packages/eblume/generic/cv/${VERSION}/${TARBALL}"
if ! curl -fsSL --head "$PACKAGE_URL" > /dev/null 2>&1; then if ! curl -fsSL --head "$PACKAGE_URL" > /dev/null 2>&1; then
echo "Error: Package not found at $PACKAGE_URL" echo "Error: Package not found at $PACKAGE_URL"
echo "Run the 'Release CV' workflow in the cv repo first." echo "Run the 'Release CV' workflow in the cv repo first."
@ -65,7 +65,7 @@ jobs:
VERSION="${{ steps.version.outputs.version }}" VERSION="${{ steps.version.outputs.version }}"
TARBALL="cv-${VERSION}.tar.gz" TARBALL="cv-${VERSION}.tar.gz"
DEPLOYMENT_FILE="argocd/manifests/cv/deployment.yaml" DEPLOYMENT_FILE="argocd/manifests/cv/deployment.yaml"
RELEASE_URL="https://forge.ops.eblu.me/api/packages/eblume/generic/cv/${VERSION}/${TARBALL}" RELEASE_URL="https://forge.eblu.me/api/packages/eblume/generic/cv/${VERSION}/${TARBALL}"
echo "Updating $DEPLOYMENT_FILE with CV_RELEASE_URL..." echo "Updating $DEPLOYMENT_FILE with CV_RELEASE_URL..."
yq -i "(.spec.template.spec.containers[0].env[] | select(.name == \"CV_RELEASE_URL\")).value = \"${RELEASE_URL}\"" "$DEPLOYMENT_FILE" yq -i "(.spec.template.spec.containers[0].env[] | select(.name == \"CV_RELEASE_URL\")).value = \"${RELEASE_URL}\"" "$DEPLOYMENT_FILE"

2
ansible/playbooks/ringtail.yml
View file

@ -57,7 +57,7 @@
tasks: tasks:
- name: Ensure blumeops repo is present - name: Ensure blumeops repo is present
ansible.builtin.git: ansible.builtin.git:
repo: "https://forge.ops.eblu.me/eblume/blumeops.git" repo: "https://forge.eblu.me/eblume/blumeops.git"
dest: /etc/blumeops dest: /etc/blumeops
version: "{{ ringtail_commit | default('main') }}" version: "{{ ringtail_commit | default('main') }}"
force: true force: true

2
ansible/roles/forgejo_actions_secrets/defaults/main.yml
View file

@ -4,7 +4,7 @@
# This role syncs repository-level Actions secrets from 1Password to Forgejo # This role syncs repository-level Actions secrets from 1Password to Forgejo
# via the Forgejo API. # via the Forgejo API.
forgejo_actions_secrets_api_url: "https://forge.ops.eblu.me/api/v1" forgejo_actions_secrets_api_url: "https://forge.eblu.me/api/v1"
forgejo_actions_secrets_owner: eblume forgejo_actions_secrets_owner: eblume
# Secrets to sync per repo. # Secrets to sync per repo.

2
argocd/apps/forgejo-runner.yaml
View file

@ -6,7 +6,7 @@ metadata:
spec: spec:
project: default project: default
source: source:
repoURL: https://forge.ops.eblu.me/eblume/blumeops.git repoURL: https://forge.eblu.me/eblume/blumeops.git
targetRevision: main targetRevision: main
path: argocd/manifests/forgejo-runner path: argocd/manifests/forgejo-runner
destination: destination:

2
argocd/manifests/cv/deployment.yaml
View file

@ -27,7 +27,7 @@ spec:
name: http name: http
env: env:
- name: CV_RELEASE_URL - name: CV_RELEASE_URL
value: "https://forge.ops.eblu.me/api/packages/eblume/generic/cv/v1.0.3/cv-v1.0.3.tar.gz" value: "https://forge.eblu.me/api/packages/eblume/generic/cv/v1.0.3/cv-v1.0.3.tar.gz"
resources: resources:
requests: requests:
memory: "64Mi" memory: "64Mi"

2
argocd/manifests/docs/deployment.yaml
View file

@ -27,7 +27,7 @@ spec:
name: http name: http
env: env:
- name: DOCS_RELEASE_URL - name: DOCS_RELEASE_URL
value: "https://forge.ops.eblu.me/eblume/blumeops/releases/download/v1.12.1/docs-v1.12.1.tar.gz" value: "https://forge.eblu.me/eblume/blumeops/releases/download/v1.12.1/docs-v1.12.1.tar.gz"
resources: resources:
requests: requests:
memory: "64Mi" memory: "64Mi"

2
argocd/manifests/forgejo-runner/deployment.yaml
View file

@ -25,7 +25,7 @@ spec:
- name: DOCKER_HOST - name: DOCKER_HOST
value: tcp://localhost:2375 value: tcp://localhost:2375
- name: FORGEJO_URL - name: FORGEJO_URL
value: "https://forge.ops.eblu.me" value: "https://forge.eblu.me"
- name: RUNNER_NAME - name: RUNNER_NAME
value: "k8s-runner" value: "k8s-runner"
- name: RUNNER_LABELS - name: RUNNER_LABELS

4
argocd/manifests/homepage/services.yaml
View file

@ -1,11 +1,11 @@
- Host Services: - Host Services:
- Forgejo: - Forgejo:
href: https://forge.ops.eblu.me href: https://forge.eblu.me
icon: forgejo icon: forgejo
description: Git forge description: Git forge
widget: widget:
type: gitea type: gitea
url: https://forge.ops.eblu.me url: https://forge.eblu.me
key: "{{HOMEPAGE_VAR_FORGEJO_API_KEY}}" key: "{{HOMEPAGE_VAR_FORGEJO_API_KEY}}"
- Registry: - Registry:
href: https://registry.ops.eblu.me href: https://registry.ops.eblu.me

4
docs/how-to/authentik/build-authentik-from-source.md
View file

@ -36,8 +36,8 @@ The `ak` wrapper script in `default.nix` sets PATH/VIRTUAL_ENV and delegates to
## Source ## Source
All derivations fetch from forge mirrors for supply chain control: All derivations fetch from forge mirrors for supply chain control:
- https://forge.ops.eblu.me/mirrors/authentik (upstream: `goauthentik/authentik`) - https://forge.eblu.me/mirrors/authentik (upstream: `goauthentik/authentik`)
- https://forge.ops.eblu.me/mirrors/authentik-client-go (upstream: `goauthentik/client-go`) - https://forge.eblu.me/mirrors/authentik-client-go (upstream: `goauthentik/client-go`)
Version and hashes are centralized in `containers/authentik/sources.nix`. Version and hashes are centralized in `containers/authentik/sources.nix`.

2
docs/how-to/configuration/update-documentation.md
View file

@ -20,7 +20,7 @@ After merging documentation changes to main:
2. Select version bump type (patch/minor/major) or enter a specific version 2. Select version bump type (patch/minor/major) or enter a specific version
3. The workflow builds, releases, and deploys automatically 3. The workflow builds, releases, and deploys automatically
Direct link: https://forge.ops.eblu.me/eblume/blumeops/actions?workflow=build-blumeops.yaml Direct link: https://forge.eblu.me/eblume/blumeops/actions?workflow=build-blumeops.yaml
## What the Workflow Does ## What the Workflow Does

2
docs/how-to/deployment/build-container-image.md
View file

@ -93,7 +93,7 @@ Container image tags include the git commit SHA they were built from (e.g. `v3.9
**The rule:** Production manifests must reference images built from a commit on main. After merging a PR that changed `containers/<name>/`: **The rule:** Production manifests must reference images built from a commit on main. After merging a PR that changed `containers/<name>/`:
1. The merge to main automatically triggers a rebuild (the `build-container.yaml` / `build-container-nix.yaml` workflows fire on pushes to `main` that touch `containers/**`) 1. The merge to main automatically triggers a rebuild (the `build-container.yaml` / `build-container-nix.yaml` workflows fire on pushes to `main` that touch `containers/**`)
2. Wait for the workflow to complete — check at `https://forge.ops.eblu.me/eblume/blumeops/actions` 2. Wait for the workflow to complete — check at `https://forge.eblu.me/eblume/blumeops/actions`
3. Find the new main-SHA tag: 3. Find the new main-SHA tag:
```bash ```bash
mise run container-list <name> mise run container-list <name>

6
docs/how-to/deployment/create-release-artifact-workflow.md
View file

@ -48,16 +48,16 @@ The upload step uses `FORGE_TOKEN`:
-X PUT \ -X PUT \
-H "Authorization: token $FORGE_TOKEN" \ -H "Authorization: token $FORGE_TOKEN" \
--upload-file "./$TARBALL" \ --upload-file "./$TARBALL" \
"https://forge.ops.eblu.me/api/packages/eblume/generic/<package>/${VERSION}/${TARBALL}" "https://forge.eblu.me/api/packages/eblume/generic/<package>/${VERSION}/${TARBALL}"
``` ```
## 3. Link the package to the repo ## 3. Link the package to the repo
After the first successful upload, the package appears under your **user-level** packages at `https://forge.ops.eblu.me/eblume/-/packages` but is not yet linked to the repo. After the first successful upload, the package appears under your **user-level** packages at `https://forge.eblu.me/eblume/-/packages` but is not yet linked to the repo.
To link it: To link it:
1. Go to `https://forge.ops.eblu.me/eblume/-/packages` 1. Go to `https://forge.eblu.me/eblume/-/packages`
2. Click the package name 2. Click the package name
3. Click **Settings** 3. Click **Settings**
4. Under **Link this package to a repository**, select the repo 4. Under **Link this package to a repository**, select the repo

14
docs/how-to/plans/completed/adopt-dagger-ci.md
View file

@ -222,12 +222,12 @@ Migrate `build-blumeops.yaml` to use Dagger for the build logic and switch from
**Current:** Docs tarball uploaded as a Forgejo release asset. **Current:** Docs tarball uploaded as a Forgejo release asset.
``` ```
https://forge.ops.eblu.me/eblume/blumeops/releases/download/v1.5.2/docs-v1.5.2.tar.gz https://forge.eblu.me/eblume/blumeops/releases/download/v1.5.2/docs-v1.5.2.tar.gz
``` ```
**New:** Docs tarball uploaded to Forgejo generic packages registry. **New:** Docs tarball uploaded to Forgejo generic packages registry.
``` ```
https://forge.ops.eblu.me/api/packages/eblume/generic/blumeops-docs/v1.6.0/docs-v1.6.0.tar.gz https://forge.eblu.me/api/packages/eblume/generic/blumeops-docs/v1.6.0/docs-v1.6.0.tar.gz
``` ```
This decouples the docs artifact from git releases while keeping the versioned URL pattern. Forgejo releases can still be created for changelog/announcement purposes without carrying the tarball. This decouples the docs artifact from git releases while keeping the versioned URL pattern. Forgejo releases can still be created for changelog/announcement purposes without carrying the tarball.
@ -290,13 +290,13 @@ async def upload_docs(
async with httpx.AsyncClient() as client: async with httpx.AsyncClient() as client:
with open(f"/tmp/docs-{version}.tar.gz", "rb") as f: with open(f"/tmp/docs-{version}.tar.gz", "rb") as f:
resp = await client.put( resp = await client.put(
f"https://forge.ops.eblu.me/api/packages/eblume/generic/" f"https://forge.eblu.me/api/packages/eblume/generic/"
f"blumeops-docs/{version}/docs-{version}.tar.gz", f"blumeops-docs/{version}/docs-{version}.tar.gz",
headers={"Authorization": f"token {token}"}, headers={"Authorization": f"token {token}"},
content=f.read(), content=f.read(),
) )
resp.raise_for_status() resp.raise_for_status()
return f"https://forge.ops.eblu.me/api/packages/eblume/generic/blumeops-docs/{version}/docs-{version}.tar.gz" return f"https://forge.eblu.me/api/packages/eblume/generic/blumeops-docs/{version}/docs-{version}.tar.gz"
@function @function
async def release_docs( async def release_docs(
@ -388,7 +388,7 @@ jobs:
- name: Update manifest and commit - name: Update manifest and commit
run: | run: |
VERSION="${{ steps.version.outputs.version }}" VERSION="${{ steps.version.outputs.version }}"
URL="https://forge.ops.eblu.me/api/packages/eblume/generic/blumeops-docs/${VERSION}/docs-${VERSION}.tar.gz" URL="https://forge.eblu.me/api/packages/eblume/generic/blumeops-docs/${VERSION}/docs-${VERSION}.tar.gz"
sed -i "s|value: \"https://.*\"|value: \"${URL}\"|" \ sed -i "s|value: \"https://.*\"|value: \"${URL}\"|" \
argocd/manifests/docs/deployment.yaml argocd/manifests/docs/deployment.yaml
git config user.name "Forgejo Actions" git config user.name "Forgejo Actions"
@ -405,11 +405,11 @@ The quartz container's `DOCS_RELEASE_URL` env var in `argocd/manifests/docs/depl
```yaml ```yaml
# Before (Forgejo releases): # Before (Forgejo releases):
- name: DOCS_RELEASE_URL - name: DOCS_RELEASE_URL
value: "https://forge.ops.eblu.me/eblume/blumeops/releases/download/v1.5.2/docs-v1.5.2.tar.gz" value: "https://forge.eblu.me/eblume/blumeops/releases/download/v1.5.2/docs-v1.5.2.tar.gz"
# After (Forgejo generic packages): # After (Forgejo generic packages):
- name: DOCS_RELEASE_URL - name: DOCS_RELEASE_URL
value: "https://forge.ops.eblu.me/api/packages/eblume/generic/blumeops-docs/v1.6.0/docs-v1.6.0.tar.gz" value: "https://forge.eblu.me/api/packages/eblume/generic/blumeops-docs/v1.6.0/docs-v1.6.0.tar.gz"
``` ```
The quartz container's `start.sh` already downloads from `DOCS_RELEASE_URL` via curl — no container changes needed, just the URL format changes. The quartz container's `start.sh` already downloads from `DOCS_RELEASE_URL` via curl — no container changes needed, just the URL format changes.

8
docs/how-to/plans/migrate-forgejo-from-brew.md
View file

@ -32,7 +32,7 @@ https://codeberg.org/forgejo/forgejo.git
Add the forge mirror as a secondary remote for convenience and backup: Add the forge mirror as a secondary remote for convenience and backup:
``` ```
https://forge.ops.eblu.me/mirrors/forgejo.git https://forge.eblu.me/mirrors/forgejo.git
``` ```
## One-Time Migration Steps ## One-Time Migration Steps
@ -48,7 +48,7 @@ ssh indri 'git clone https://codeberg.org/forgejo/forgejo.git ~/code/3rd/forgejo
### 2. Add Forge Mirror as Secondary Remote ### 2. Add Forge Mirror as Secondary Remote
```fish ```fish
ssh indri 'cd ~/code/3rd/forgejo && git remote add forge https://forge.ops.eblu.me/mirrors/forgejo.git' ssh indri 'cd ~/code/3rd/forgejo && git remote add forge https://forge.eblu.me/mirrors/forgejo.git'
``` ```
### 3. Check Out the Desired Version Tag ### 3. Check Out the Desired Version Tag
@ -155,7 +155,7 @@ Replace brew install/start with binary-check + LaunchAgent pattern (matching `an
# ssh indri 'git clone https://codeberg.org/forgejo/forgejo.git ~/code/3rd/forgejo' # ssh indri 'git clone https://codeberg.org/forgejo/forgejo.git ~/code/3rd/forgejo'
# #
# 2. Add forge mirror as secondary remote: # 2. Add forge mirror as secondary remote:
# ssh indri 'cd ~/code/3rd/forgejo && git remote add forge https://forge.ops.eblu.me/mirrors/forgejo.git' # ssh indri 'cd ~/code/3rd/forgejo && git remote add forge https://forge.eblu.me/mirrors/forgejo.git'
# #
# 3. Set up Go and Node via mise: # 3. Set up Go and Node via mise:
# ssh indri 'cd ~/code/3rd/forgejo && mise use go@1.24 node@20' # ssh indri 'cd ~/code/3rd/forgejo && mise use go@1.24 node@20'
@ -275,7 +275,7 @@ No changes needed — paths already flow through variables in `defaults/main.yml
After running the migration and Ansible: After running the migration and Ansible:
- [ ] `ssh indri 'launchctl list mcquack.eblume.forgejo'` — shows running - [ ] `ssh indri 'launchctl list mcquack.eblume.forgejo'` — shows running
- [ ] `curl https://forge.ops.eblu.me/api/v1/version` — returns JSON with version - [ ] `curl https://forge.eblu.me/api/v1/version` — returns JSON with version
- [ ] Git clone over SSH: `git clone ssh://forgejo@forge.ops.eblu.me:2222/eblume/blumeops.git /tmp/test-clone` - [ ] Git clone over SSH: `git clone ssh://forgejo@forge.ops.eblu.me:2222/eblume/blumeops.git /tmp/test-clone`
- [ ] Git push works on an existing clone - [ ] Git push works on an existing clone
- [ ] Ansible dry-run is clean: `mise run provision-indri -- --tags forgejo --check --diff` - [ ] Ansible dry-run is clean: `mise run provision-indri -- --tags forgejo --check --diff`

2
docs/how-to/plans/upstream-fork-strategy.md
View file

@ -209,7 +209,7 @@ This fork directly supports the [[adopt-dagger-ci]] plan. Once the fork exists,
# After (using the BlumeOps fork): # After (using the BlumeOps fork):
.with_exec(["git", "clone", "--depth=1", "--branch=blumeops", .with_exec(["git", "clone", "--depth=1", "--branch=blumeops",
"https://forge.ops.eblu.me/mirrors/quartz.git", "/tmp/quartz"]) "https://forge.eblu.me/mirrors/quartz.git", "/tmp/quartz"])
``` ```
This means the `build-blumeops.yaml` workflow automatically picks up fork customizations (like `last-reviewed` rendering) when building docs — no separate integration step needed. Local iteration via `dagger call build-docs` also uses the fork, so you can test Quartz customizations against actual BlumeOps content before pushing. This means the `build-blumeops.yaml` workflow automatically picks up fork customizations (like `last-reviewed` rendering) when building docs — no separate integration step needed. Local iteration via `dagger call build-docs` also uses the fork, so you can test Quartz customizations against actual BlumeOps content before pushing.

2
docs/how-to/zot/register-zot-oidc-client.md
View file

@ -12,7 +12,7 @@ tags:
Register a zot OAuth2 provider and application in Authentik via blueprint, following the same pattern as Grafana and Forgejo. Register a zot OAuth2 provider and application in Authentik via blueprint, following the same pattern as Grafana and Forgejo.
Completed in PR [#236](https://forge.ops.eblu.me/eblume/blumeops/pulls/236). Completed in PR [#236](https://forge.eblu.me/eblume/blumeops/pulls/236).
## What Was Done ## What Was Done

2
docs/index.md
View file

@ -16,7 +16,7 @@ infrastructure.
BlumeOps is my personal homelab infrastructure managed entirely through code. BlumeOps is my personal homelab infrastructure managed entirely through code.
Everything lives in a [single git repository](https://github.com/eblume/blumeops), from service configs to Everything lives in a [single git repository](https://github.com/eblume/blumeops), from service configs to
deployment automation. Even the [[forgejo]] instance that [hosts this repo](https://forge.ops.eblu.me/eblume/blumeops) deployment automation. Even the [[forgejo]] instance that [hosts this repo](https://forge.eblu.me/eblume/blumeops)
is defined within it, making BlumeOps fully self-hosting. It's a digital life is defined within it, making BlumeOps fully self-hosting. It's a digital life
raft I built for myself as I went, and you can see it all from within your raft I built for myself as I went, and you can see it all from within your
editor of choice. (I recommend vim.) editor of choice. (I recommend vim.)

2
docs/quartz.layout.ts
View file

@ -14,7 +14,7 @@ export const sharedPageComponents: SharedLayout = {
footer: Component.Footer({ footer: Component.Footer({
links: { links: {
"GitHub": "https://github.com/eblume/blumeops", "GitHub": "https://github.com/eblume/blumeops",
"Forge": "https://forge.ops.eblu.me/eblume/blumeops", "Forge": "https://forge.eblu.me/eblume/blumeops",
}, },
}), }),
} }

2
docs/reference/services/forgejo.md
View file

@ -72,7 +72,7 @@ mise run provision-indri -- --tags forgejo_actions_secrets
The Ansible role authenticates to the Forgejo API using a Personal Access Token (PAT). This PAT must be created manually: The Ansible role authenticates to the Forgejo API using a Personal Access Token (PAT). This PAT must be created manually:
1. Go to https://forge.ops.eblu.me/user/settings/applications 1. Go to https://forge.eblu.me/user/settings/applications
2. Create a new token with `write:repository` scope 2. Create a new token with `write:repository` scope
3. Store it in 1Password → "Forgejo Secrets" item → `api-token` field 3. Store it in 1Password → "Forgejo Secrets" item → `api-token` field

2
docs/tutorials/contributing.md
View file

@ -16,7 +16,7 @@ This tutorial walks through making your first contribution to BluemeOps - from u
Before contributing, you'll need: Before contributing, you'll need:
- Access to the [[tailscale|Tailscale]] network (request from Erich) - Access to the [[tailscale|Tailscale]] network (request from Erich)
- SSH key added to [[forgejo|Forgejo]] (https://forge.ops.eblu.me) - SSH key added to [[forgejo|Forgejo]] (https://forge.eblu.me)
- Development tools installed (see below) - Development tools installed (see below)
## Tooling Setup ## Tooling Setup

2
mise-tasks/branch-cleanup
View file

@ -44,7 +44,7 @@ from rich.console import Console
from rich.table import Table from rich.table import Table
PROTECTED_BRANCHES = {"main", "master"} PROTECTED_BRANCHES = {"main", "master"}
FORGE_API = "https://forge.ops.eblu.me/api/v1" FORGE_API = "https://forge.eblu.me/api/v1"
REPO_OWNER = "eblume" REPO_OWNER = "eblume"
REPO_NAME = "blumeops" REPO_NAME = "blumeops"
OP_TOKEN_REF = "op://vg6xf6vvfmoh5hqjjhlhbeoaie/w3663ffnvkewbftncqxtcpeavy/api-token" OP_TOKEN_REF = "op://vg6xf6vvfmoh5hqjjhlhbeoaie/w3663ffnvkewbftncqxtcpeavy/api-token"

2
mise-tasks/container-build-and-release
View file

@ -21,7 +21,7 @@ import httpx
import typer import typer
REGISTRY = "registry.ops.eblu.me" REGISTRY = "registry.ops.eblu.me"
FORGE_URL = "https://forge.ops.eblu.me" FORGE_URL = "https://forge.eblu.me"
FORGE_API = f"{FORGE_URL}/api/v1" FORGE_API = f"{FORGE_URL}/api/v1"
REPO = "eblume/blumeops" REPO = "eblume/blumeops"
FORGE_ACTIONS = f"{FORGE_URL}/{REPO}/actions" FORGE_ACTIONS = f"{FORGE_URL}/{REPO}/actions"

2
mise-tasks/docs-mikado
View file

@ -238,7 +238,7 @@ def classify_branch_position(commits: list[dict]) -> str:
return "unknown" return "unknown"
FORGE_API = "https://forge.ops.eblu.me/api/v1" FORGE_API = "https://forge.eblu.me/api/v1"
def find_pr_for_branch(branch: str) -> dict | None: def find_pr_for_branch(branch: str) -> dict | None:

4
mise-tasks/mirror-create
View file

@ -6,7 +6,7 @@
#USAGE flag "--dry-run" help="Show what would be done without creating" #USAGE flag "--dry-run" help="Show what would be done without creating"
set -euo pipefail set -euo pipefail
FORGE_API="https://forge.ops.eblu.me/api/v1" FORGE_API="https://forge.eblu.me/api/v1"
ORG="mirrors" ORG="mirrors"
OP_TOKEN_REF="op://blumeops/w3663ffnvkewbftncqxtcpeavy/api-token" OP_TOKEN_REF="op://blumeops/w3663ffnvkewbftncqxtcpeavy/api-token"
OP_GITHUB_PAT_REF="op://blumeops/w3663ffnvkewbftncqxtcpeavy/github-mirror-pat" OP_GITHUB_PAT_REF="op://blumeops/w3663ffnvkewbftncqxtcpeavy/github-mirror-pat"
@ -72,7 +72,7 @@ http_code=$(curl -s -o /tmp/mirror-create-response.json -w "%{http_code}" \
-d "$payload") -d "$payload")
if [[ "$http_code" == "201" ]]; then if [[ "$http_code" == "201" ]]; then
echo "Created mirror: https://forge.ops.eblu.me/${ORG}/${repo_name}" echo "Created mirror: https://forge.eblu.me/${ORG}/${repo_name}"
else else
echo "Error (HTTP $http_code):" echo "Error (HTTP $http_code):"
cat /tmp/mirror-create-response.json cat /tmp/mirror-create-response.json

2
mise-tasks/pr-comments
View file

@ -20,7 +20,7 @@ import httpx
from rich.console import Console from rich.console import Console
from rich.text import Text from rich.text import Text
FORGE_API_BASE = "https://forge.ops.eblu.me/api/v1" FORGE_API_BASE = "https://forge.eblu.me/api/v1"
REPO_OWNER = "eblume" REPO_OWNER = "eblume"
REPO_NAME = "blumeops" REPO_NAME = "blumeops"

2
mise-tasks/runner-logs
View file

@ -27,7 +27,7 @@ import typer
from rich.console import Console from rich.console import Console
from rich.table import Table from rich.table import Table
FORGE_API = "https://forge.ops.eblu.me/api/v1" FORGE_API = "https://forge.eblu.me/api/v1"
REPO = "eblume/blumeops" REPO = "eblume/blumeops"
ACTIONS_LOG_DIR = "/opt/homebrew/var/forgejo/data/actions_log/eblume/blumeops" ACTIONS_LOG_DIR = "/opt/homebrew/var/forgejo/data/actions_log/eblume/blumeops"

2
mise-tasks/services-check
View file

@ -70,7 +70,7 @@ check_http "Prometheus" "https://prometheus.ops.eblu.me/-/healthy"
check_http "Loki" "https://loki.ops.eblu.me/ready" check_http "Loki" "https://loki.ops.eblu.me/ready"
check_http "Grafana" "https://grafana.ops.eblu.me/api/health" check_http "Grafana" "https://grafana.ops.eblu.me/api/health"
check_http "ArgoCD" "https://argocd.ops.eblu.me/healthz" check_http "ArgoCD" "https://argocd.ops.eblu.me/healthz"
check_http "Forgejo" "https://forge.ops.eblu.me/" check_http "Forgejo" "https://forge.eblu.me/"
check_http "Zot Registry" "https://registry.ops.eblu.me/v2/_catalog" check_http "Zot Registry" "https://registry.ops.eblu.me/v2/_catalog"
check_http "Kiwix" "https://kiwix.ops.eblu.me/" check_http "Kiwix" "https://kiwix.ops.eblu.me/"
check_http "Miniflux" "https://feed.ops.eblu.me/healthcheck" check_http "Miniflux" "https://feed.ops.eblu.me/healthcheck"

2
nixos/ringtail/configuration.nix
View file

@ -496,7 +496,7 @@ in
instances.nix_container_builder = { instances.nix_container_builder = {
enable = true; enable = true;
name = "ringtail-nix-builder"; name = "ringtail-nix-builder";
url = "https://forge.ops.eblu.me"; url = "https://forge.eblu.me";
tokenFile = "/etc/forgejo-runner/token.env"; tokenFile = "/etc/forgejo-runner/token.env";
labels = [ "nix-container-builder:host" ]; labels = [ "nix-container-builder:host" ];
hostPackages = with pkgs; [ hostPackages = with pkgs; [