caddy-shortcuts: render shortcuts from private Forgejo sibling repos #121

Open
opened 2026-05-25 05:30:21 +00:00 by coilysiren · 0 comments
Owner

After the port in #118 and the regression fix in #120, the script reads sibling coily.yaml from Forgejo anonymously. That covers ~35 public coilysiren/* repos. The ~10 private ones are silently skipped, so any tailnet.shortcut declared in a private repo's coily.yaml will not render.

Fix options:

  1. Use a Forgejo Actions secret with org-wide read scope (e.g. a personal token belonging to a service user that has read access across coilysiren/*). Stash in SSM, sync to Forgejo Actions secret via API.
  2. Mark the relevant private repos public if there's no real reason for them to be private.

Needs: an audit of which private repos actually declare tailnet.shortcut. If none do today, this is dormant and can stay open as a placeholder.

After the port in #118 and the regression fix in #120, the script reads sibling `coily.yaml` from Forgejo anonymously. That covers ~35 public coilysiren/* repos. The ~10 private ones are silently skipped, so any `tailnet.shortcut` declared in a private repo's coily.yaml will not render. Fix options: 1. Use a Forgejo Actions secret with org-wide read scope (e.g. a personal token belonging to a service user that has read access across `coilysiren/*`). Stash in SSM, sync to Forgejo Actions secret via API. 2. Mark the relevant private repos public if there's no real reason for them to be private. Needs: an audit of which private repos actually declare `tailnet.shortcut`. If none do today, this is dormant and can stay open as a placeholder.
coilysiren added
P4
and removed
P3
labels 2026-05-31 07:00:40 +00:00
Sign in to join this conversation.
No labels
P0
P1
P2
P3
P4
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
coilyco-flight-deck/infrastructure#121
No description provided.