Add runbook coverage for REUSE_SURFACE_TOKEN and REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET in reuse-surface-env, plus an idempotent make reuse-forgejo-webhook target that wires the coulomb org push webhook to the hub receiver.
27 lines
1 KiB
YAML
27 lines
1 KiB
YAML
# Production overrides for reuse-surface federation hub.
|
|
# Runtime secrets (Secret reuse-surface-env, namespace reuse):
|
|
# REUSE_SURFACE_TOKEN — hub write API bearer token
|
|
# REUSE_SURFACE_FORGEJO_WEBHOOK_SECRET — HMAC for POST /v1/webhooks/forgejo
|
|
# See docs/reuse-surface-on-railiance01.md#runtime-secrets and make reuse-forgejo-webhook.
|
|
|
|
image:
|
|
tag: "e3ae22e"
|
|
|
|
landing:
|
|
enabled: true
|
|
title: "REUSE federation endpoint"
|
|
eyebrow: "reuse.coulomb.social"
|
|
body: "This is the Railiance REUSE capability federation service. It is an API endpoint for automated clients and operators; there is no browser login for this service."
|
|
buttonLabel: "Open federated index"
|
|
primaryUrl: "/v1/federated"
|
|
links:
|
|
- label: "Health check"
|
|
url: "/health"
|
|
- label: "Federated capability index"
|
|
url: "/v1/federated"
|
|
- label: "Operator runbook"
|
|
url: "https://gitea.coulomb.social/coulomb/railiance-apps/src/branch/main/docs/reuse-surface-on-railiance01.md"
|
|
|
|
ingress:
|
|
redirectHttp:
|
|
enabled: true
|