From c94721b70b94a27850f6f3e5e522aed6a422551e Mon Sep 17 00:00:00 2001 From: Will Anderson Date: Tue, 5 May 2026 05:27:44 -0500 Subject: [PATCH] Remove SSH insteadOf rewrite from git-ssh-init.sh MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Gitea's SSH server is disabled (START_SSH_SERVER=false) so the SSH URL rewrite breaks git HTTPS clones in build containers. HTTPS git ops work directly from Legion host network — Cloudflare bypasses CF Access for smart-HTTP and release asset paths. --- servers/legion/k8s/gitea-runner/git-ssh-init.sh | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/servers/legion/k8s/gitea-runner/git-ssh-init.sh b/servers/legion/k8s/gitea-runner/git-ssh-init.sh index 2018dbe..061dcf2 100644 --- a/servers/legion/k8s/gitea-runner/git-ssh-init.sh +++ b/servers/legion/k8s/gitea-runner/git-ssh-init.sh @@ -40,9 +40,9 @@ EOF # Point SSH at our per-job config (merge with any existing config if present) export GIT_SSH_COMMAND="ssh -F ~/.ssh/gitea_config" - # Rewrite HTTPS Gitea URLs → SSH so `actions/checkout` and plain `git clone` - # both go through SSH without any HTTPS credential or CF Access token needed - git config --global \ - url."git@git.neuralplatform.ai:".insteadOf \ - "https://git.neuralplatform.ai/" 2>/dev/null || true + # NOTE: Do NOT add url.insteadOf SSH rewrite here. + # Gitea's built-in SSH server is disabled (START_SSH_SERVER=false) so + # SSH git clones would fail. HTTPS git operations work directly from + # the build container host network — Cloudflare bypasses the CF Access + # gate for git smart-HTTP and release asset paths. fi