From 0d9f74f68f58a0de16299a1a8107d73137b0665b Mon Sep 17 00:00:00 2001
From: Will Anderson <will@neuralplatform.ai>
Date: Thu, 23 Apr 2026 12:45:00 -0500
Subject: [PATCH] fix(ci-runner): use internal cluster URL for Gitea to bypass
 Cloudflare Access

---
 servers/legion/k8s/gitea-runner/external-secrets.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/servers/legion/k8s/gitea-runner/external-secrets.yaml b/servers/legion/k8s/gitea-runner/external-secrets.yaml
index 397e11c..8f1fbd8 100644
--- a/servers/legion/k8s/gitea-runner/external-secrets.yaml
+++ b/servers/legion/k8s/gitea-runner/external-secrets.yaml
@@ -9,7 +9,7 @@ metadata:
   annotations:
     force-sync: "2026-04-23"
 spec:
-  refreshInterval: 1h
+  refreshInterval: 10s
   secretStoreRef:
     name: vault
     kind: ClusterSecretStore
@@ -18,7 +18,7 @@ spec:
     creationPolicy: Owner
     template:
       data:
-        GITEA_INSTANCE_URL: "https://git.neuralplatform.ai"
+        GITEA_INSTANCE_URL: "http://gitea.git.svc.cluster.local:3000"
         GITEA_RUNNER_REGISTRATION_TOKEN: "{{ .runner_token }}"
   data:
     - secretKey: runner_token