---
# Forgejo Actions Secrets role configuration
#
# This role syncs repository-level Actions secrets from 1Password to Forgejo
# via the Forgejo API.

forgejo_actions_secrets_api_url: "https://forge.eblu.me/api/v1"
forgejo_actions_secrets_owner: eblume

# Secrets to sync per repo.
# Each entry: {repo: "name", secrets: [{name: "SECRET_NAME", value_var: "ansible_fact_name"}]}
forgejo_actions_secrets_repos:
  - repo: blumeops
    secrets:
      - name: ARGOCD_AUTH_TOKEN
        value_var: forgejo_secret_argocd_token
      - name: FLY_DEPLOY_TOKEN
        value_var: forgejo_secret_fly_deploy_token
      - name: ZOT_CI_API_KEY
        value_var: forgejo_secret_zot_ci_api_key
  - repo: cv
    secrets:
      - name: FORGE_TOKEN
        value_var: forgejo_api_token