hackclub/burrow
1
0
Fork 0
Code Pull requests Releases Packages Activity Actions
burrow/secrets/README.md
Conrad Kramer ed247b2f5e
Some checks failed
Build Rust / Cargo Test (push) Waiting to run
Details
Build Site / Next.js Build (push) Waiting to run
Details
Build Apple / Build App (iOS Simulator) (push) Failing after 14s
Details
Build Apple / Build App (macOS) (push) Failing after 13s
Details
Wire runner caches and forge secrets through agenix
2026-03-19 00:04:27 -07:00

628 B
Raw Blame History

Secrets

Burrow secrets live in secrets/<name>.age and are managed with agenix.

For the Forgejo Namespace Cloud runtime:

  • secrets/forgejo/admin-password.age
  • secrets/forgejo/agent-ssh-key.age
  • secrets/forgejo/nsc-token.age
  • secrets/forgejo/nsc-dispatcher-config.age
  • secrets/forgejo/nsc-autoscaler-config.age

Use:

  • make secret name=forgejo/nsc-token
  • make secret-file name=forgejo/agent-ssh-key file=/path/to/source

The forge host decrypts these files at activation time and feeds the resulting paths into services.burrow.forge, services.burrow.forgeRunner, and services.burrow.forgejoNsc.