Document reuse-surface runtime secrets and Forgejo org webhook
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 3s

Add runbook coverage for REUSE_SURFACE_TOKEN and
REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET in reuse-surface-env, plus an
idempotent make reuse-forgejo-webhook target that wires the coulomb org
push webhook to the hub receiver.
This commit is contained in:
tegwick 2026-07-07 21:28:46 +02:00
parent 8f4486f978
commit 9b31f229e8
4 changed files with 177 additions and 14 deletions

View file

@ -1,8 +1,8 @@
# Production overrides for reuse-surface federation hub.
# REUSE_SURFACE_TOKEN is supplied via Secret reuse-surface-env.
# REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET (REUSE-WP-0019-T02, POST
# /v1/webhooks/forgejo) is the same Secret's job -- not yet added as of
# this image; the webhook endpoint returns 503 until it is.
# Runtime secrets (Secret reuse-surface-env, namespace reuse):
# REUSE_SURFACE_TOKEN — hub write API bearer token
# REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET — HMAC for POST /v1/webhooks/forgejo
# See docs/reuse-surface-on-railiance01.md#runtime-secrets and make reuse-forgejo-webhook.
image:
tag: "e3ae22e"