blumeops/docs
Erich Blume 74bd5abe54 Add IaC for Forgejo Actions secrets via Ansible (#107)
## Summary
- New `forgejo_actions_secrets` Ansible role syncs repository-level Actions secrets from 1Password to Forgejo via the Forgejo API
- Replaces manual process of copying secrets from 1Password to Forgejo UI
- Documents the one-time PAT setup requirement in forgejo.md

## Manual Setup Required
Before this role can run, a Forgejo PAT must be created:
1. Go to https://forge.ops.eblu.me/user/settings/applications
2. Create a new token with `write:repository` scope
3. Store it in 1Password → "Forgejo Secrets" item → `api-token` field

This has already been done.

## Test Plan
- [x] Ran `mise run provision-indri -- --tags forgejo_actions_secrets` successfully
- [x] Verified secret synced (API returned 204 = updated existing)
- [x] Ansible-lint passes

🤖 Generated with [Claude Code](https://claude.ai/code)

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/107
2026-02-04 09:11:01 -08:00
..
changelog.d Add IaC for Forgejo Actions secrets via Ansible (#107) 2026-02-04 09:11:01 -08:00
explanation Add Phase 5: explanation documentation (#96) 2026-02-03 20:33:39 -08:00
how-to Fix Quartz build to preserve git history for accurate file dates (#105) 2026-02-04 08:25:46 -08:00
reference Add IaC for Forgejo Actions secrets via Ansible (#107) 2026-02-04 09:11:01 -08:00
tutorials Rename indri-services-check to services-check (#103) 2026-02-04 07:49:15 -08:00
index.md Improve build workflow with version bump selection and changelog in releases (#104) 2026-02-04 08:13:16 -08:00
quartz.config.ts Move zk cards to docs/zk/ for documentation restructuring (#84) 2026-02-03 09:13:50 -08:00
quartz.layout.ts Move zk cards to docs/zk/ for documentation restructuring (#84) 2026-02-03 09:13:50 -08:00