From f3477ac102ceb0dfe9cefc194da363a33b88e906 Mon Sep 17 00:00:00 2001
From: Will Anderson <will@neuralplatform.ai>
Date: Thu, 26 Mar 2026 10:35:13 -0500
Subject: [PATCH] ci: fix gitea runner URL and set DEFAULT_ACTIONS_URL

- external-secrets.yaml: GITEA_INSTANCE_URL changed from cluster-internal
  URL to https://git.neuralplatform.ai so runner can register externally
- gitea.yaml: add GITEA__actions__DEFAULT_ACTIONS_URL=gitea so all
  actions/* references resolve from gitea.com, not github.com
- Dockerfile: track runner image (Python 3.12 + build deps) in repo
---
 servers/legion/apps/gitea.yaml                |  2 ++
 servers/legion/k8s/gitea-runner/Dockerfile    | 19 +++++++++++++++++++
 .../k8s/gitea-runner/external-secrets.yaml    |  2 +-
 3 files changed, 22 insertions(+), 1 deletion(-)
 create mode 100644 servers/legion/k8s/gitea-runner/Dockerfile

diff --git a/servers/legion/apps/gitea.yaml b/servers/legion/apps/gitea.yaml
index 945c653..6ed1db6 100644
--- a/servers/legion/apps/gitea.yaml
+++ b/servers/legion/apps/gitea.yaml
@@ -59,6 +59,8 @@ spec:
               value: "true"
             - name: GITEA__webhook__ALLOWED_HOST_LIST
               value: 192.168.0.0/24,10.0.0.0/8
+            - name: GITEA__actions__DEFAULT_ACTIONS_URL
+              value: gitea
           volumeMounts:
             - name: data
               mountPath: /data
diff --git a/servers/legion/k8s/gitea-runner/Dockerfile b/servers/legion/k8s/gitea-runner/Dockerfile
new file mode 100644
index 0000000..a8cba4c
--- /dev/null
+++ b/servers/legion/k8s/gitea-runner/Dockerfile
@@ -0,0 +1,19 @@
+FROM gitea/act_runner:latest
+
+USER root
+
+RUN apk add --no-cache \
+    bash \
+    git \
+    curl \
+    nodejs \
+    npm \
+    python3 \
+    py3-pip \
+    python3-dev \
+    gcc \
+    musl-dev \
+    linux-headers \
+    make && \
+    ln -sf /usr/bin/node /usr/local/bin/node && \
+    ln -sf /usr/bin/npm /usr/local/bin/npm
diff --git a/servers/legion/k8s/gitea-runner/external-secrets.yaml b/servers/legion/k8s/gitea-runner/external-secrets.yaml
index d8c4d98..0f82d70 100644
--- a/servers/legion/k8s/gitea-runner/external-secrets.yaml
+++ b/servers/legion/k8s/gitea-runner/external-secrets.yaml
@@ -16,7 +16,7 @@ spec:
     creationPolicy: Owner
     template:
       data:
-        GITEA_INSTANCE_URL: "http://gitea.git.svc.cluster.local:3000"
+        GITEA_INSTANCE_URL: "https://git.neuralplatform.ai"
         GITEA_RUNNER_REGISTRATION_TOKEN: "{{ .runner_token }}"
   data:
     - secretKey: runner_token