Will Anderson 2acf886d9f add CF Access service token for Gitea Actions runner
The Gitea CI runners need to authenticate to git.neuralplatform.ai
through Cloudflare Access without going through Google OAuth. Add a
non-identity service token Will can attach to the existing
dashboard-managed Gitea Access application via a Service Auth policy.

The application itself stays dashboard-managed for now to avoid
drifting the human-auth policy that's already working. The token id
goes to Vault at secret/gitea-runner-cf-access where ESO picks it up
into the runner secret.
2026-05-04 16:14:42 -05:00

infrastructure

Personal infrastructure-as-code for Legion (k3s home server) and supporting tooling.

Doc What it covers
AGENTS.md Full reference: machines, secrets, services, domains, namespaces, common operations
servers/legion/README.md What's running on Legion and how deployment works
servers/legion/RUNBOOK.md Disaster recovery — full restore from scratch

Quick start

cd servers/legion
direnv allow
terraform plan
terraform apply

Push to servers/ to deploy app changes via Argo CD.

S
Description
No description provided
Readme
1.4 MiB
Languages
HCL 78.4%
Shell 17.5%
Python 2.6%
Dockerfile 1.5%