blumeops/docs/changelog.d/feature-forgejo-actions-secrets-iac.infra.md at 74bd5abe5403f8b07ef8705443e832af91258017

Erich Blume 74bd5abe54 Add IaC for Forgejo Actions secrets via Ansible (#107 )

## Summary
- New `forgejo_actions_secrets` Ansible role syncs repository-level Actions secrets from 1Password to Forgejo via the Forgejo API
- Replaces manual process of copying secrets from 1Password to Forgejo UI
- Documents the one-time PAT setup requirement in forgejo.md

## Manual Setup Required
Before this role can run, a Forgejo PAT must be created:
1. Go to https://forge.ops.eblu.me/user/settings/applications
2. Create a new token with `write:repository` scope
3. Store it in 1Password → "Forgejo Secrets" item → `api-token` field

This has already been done.

## Test Plan
- [x] Ran `mise run provision-indri -- --tags forgejo_actions_secrets` successfully
- [x] Verified secret synced (API returned 204 = updated existing)
- [x] Ansible-lint passes

🤖 Generated with [Claude Code](https://claude.ai/code)

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/107

2026-02-04 09:11:01 -08:00

141 B

Raw Blame History

Add IaC for Forgejo Actions secrets via new forgejo_actions_secrets Ansible role, syncing repository secrets from 1Password to Forgejo API

141 B Raw Blame History

141 B

Raw Blame History