blumeops/docs/reference
Erich Blume 74bd5abe54 Add IaC for Forgejo Actions secrets via Ansible (#107)
## Summary
- New `forgejo_actions_secrets` Ansible role syncs repository-level Actions secrets from 1Password to Forgejo via the Forgejo API
- Replaces manual process of copying secrets from 1Password to Forgejo UI
- Documents the one-time PAT setup requirement in forgejo.md

## Manual Setup Required
Before this role can run, a Forgejo PAT must be created:
1. Go to https://forge.ops.eblu.me/user/settings/applications
2. Create a new token with `write:repository` scope
3. Store it in 1Password → "Forgejo Secrets" item → `api-token` field

This has already been done.

## Test Plan
- [x] Ran `mise run provision-indri -- --tags forgejo_actions_secrets` successfully
- [x] Verified secret synced (API returned 204 = updated existing)
- [x] Ansible-lint passes

🤖 Generated with [Claude Code](https://claude.ai/code)

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/107
2026-02-04 09:11:01 -08:00
..
ansible Add Phase 3 tutorials with audience targeting (#94) 2026-02-03 18:51:57 -08:00
infrastructure Complete Phase 6: documentation cleanup and integration (#97) 2026-02-03 20:52:37 -08:00
kubernetes Add Phase 3 tutorials with audience targeting (#94) 2026-02-03 18:51:57 -08:00
operations Switch to filename-based wiki-links (Quartz resolves by filename) 2026-02-03 16:29:31 -08:00
services Add IaC for Forgejo Actions secrets via Ansible (#107) 2026-02-04 09:11:01 -08:00
storage Remove iCloud Photos from borgmatic backup (#100) 2026-02-04 07:09:28 -08:00
index.md Add doc-random task and documentation improvements (#98) 2026-02-03 21:17:58 -08:00