Erich Blume
538a8cf6c1
Update all HTTPS references to use the new public domain. This touches workflows, ArgoCD manifests, Ansible, mise-tasks, NixOS config, and documentation (~29 files). Deliberately kept as forge.ops.eblu.me: - SSH repoURLs in argocd/apps/ (SSH stays tailnet-only) - containers/*/Dockerfile and *.nix (internal CI efficiency) - Caddy services table in routing.md - Internal URL references in forgejo.md Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
80 lines
2.3 KiB
Bash
Executable file
80 lines
2.3 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
#MISE description="Create a new upstream mirror in the mirrors/ Forgejo org"
|
|
#USAGE arg "<url>" help="Upstream git URL to mirror (e.g. https://github.com/org/repo.git)"
|
|
#USAGE flag "--name <name>" help="Repository name on forge (default: derived from URL)"
|
|
#USAGE flag "--description <description>" help="Repository description"
|
|
#USAGE flag "--dry-run" help="Show what would be done without creating"
|
|
set -euo pipefail
|
|
|
|
FORGE_API="https://forge.eblu.me/api/v1"
|
|
ORG="mirrors"
|
|
OP_TOKEN_REF="op://blumeops/w3663ffnvkewbftncqxtcpeavy/api-token"
|
|
OP_GITHUB_PAT_REF="op://blumeops/w3663ffnvkewbftncqxtcpeavy/github-mirror-pat"
|
|
|
|
url="${usage_url:?}"
|
|
|
|
# Derive repo name from URL if not provided
|
|
if [[ -n "${usage_name:-}" ]]; then
|
|
repo_name="${usage_name}"
|
|
else
|
|
# Strip trailing .git and extract last path component
|
|
repo_name="$(basename "$url" .git)"
|
|
fi
|
|
|
|
description="${usage_description:-}"
|
|
|
|
# Detect service type from URL
|
|
service="git"
|
|
case "$url" in
|
|
*github.com*) service="github" ;;
|
|
*codeberg.org*) service="gitea" ;;
|
|
*forgejo.org*) service="gitea" ;;
|
|
esac
|
|
|
|
echo "Mirror: $url"
|
|
echo "Forge repo: $ORG/$repo_name"
|
|
echo "Service: $service"
|
|
[[ -n "$description" ]] && echo "Description: $description"
|
|
echo
|
|
|
|
if [[ "${usage_dry_run:-}" == "true" ]]; then
|
|
echo "[dry-run] Would create mirror at ${FORGE_API}/repos/migrate"
|
|
exit 0
|
|
fi
|
|
|
|
echo "Reading secrets from 1Password..."
|
|
token="$(op read "$OP_TOKEN_REF")"
|
|
|
|
# For GitHub upstreams, include the PAT for authenticated sync
|
|
auth_token=""
|
|
if [[ "$service" == "github" ]]; then
|
|
auth_token="$(op read "$OP_GITHUB_PAT_REF")"
|
|
echo "Using GitHub PAT for authenticated mirror sync"
|
|
fi
|
|
|
|
payload=$(cat <<ENDJSON
|
|
{
|
|
"clone_addr": "$url",
|
|
"repo_name": "$repo_name",
|
|
"repo_owner": "$ORG",
|
|
"mirror": true,
|
|
"service": "$service",
|
|
"description": "$description",
|
|
"auth_token": "$auth_token"
|
|
}
|
|
ENDJSON
|
|
)
|
|
|
|
http_code=$(curl -s -o /tmp/mirror-create-response.json -w "%{http_code}" \
|
|
-X POST "${FORGE_API}/repos/migrate" \
|
|
-H "Authorization: token ${token}" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$payload")
|
|
|
|
if [[ "$http_code" == "201" ]]; then
|
|
echo "Created mirror: https://forge.eblu.me/${ORG}/${repo_name}"
|
|
else
|
|
echo "Error (HTTP $http_code):"
|
|
cat /tmp/mirror-create-response.json
|
|
exit 1
|
|
fi
|