5 Commits

Include renames

Author	SHA1	Message	Date
octoturgeandClaude Sonnet 5	60e63edd61	Fix bogus templates/ self-match in delete-detection step ... git ls-tree -d --name-only \$SHA -- templates matched the templates/ directory entry itself (basename "templates"), so every run tried and harmlessly failed to delete a nonexistent profiles-templates template. Use 'templates/*' as the pathspec to list only the child directories. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-23 16:55:56 +02:00
octoturgeandClaude Sonnet 5	22429aa4e3	Make each Coder template self-contained (fix coder templates push failure) ... coder templates push -d templates/<env> only uploads that directory to the Coder server, so main.tf's file() references reaching outside it via ../../profile-templates and ../../scripts failed at push/apply time ("Invalid function argument ... this function works only with files that are distributed as part of the configuration source code"). Confirmed via an actual failed run of coder-templates.yml once the runner network fix let it get that far. Fix: duplicate profile.code-profile, cli-setup-wizard.sh, and install-skills.sh into each templates/<env>/ directory and drop the old shared scripts/ and profile-templates/ directories. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-23 16:52:12 +02:00
octoturge	5b32539d65	Rename GITEA_ROTATION_TOKEN secret to ROTATION_PAT (GITEA_ prefix is reserved)	2026-08-23 16:20:13 +02:00
octoturgeandClaude Sonnet 5	a5a760b24a	Add daily Coder token auto-rotation workflow ... This Coder deployment caps API token lifetime at 168h (7 days), so rather than raising that cap deployment-wide, add .gitea/workflows/rotate-coder-token.yml: runs daily, mints a new 168h coder token, PUTs it into this repo's CODER_SESSION_TOKEN secret via Gitea's actions/secrets API (confirmed against the live instance's swagger.v1.json - PUT /repos/{owner}/{repo}/actions/secrets/{name} with {"data": "..."}), then deletes the token(s) it replaced. Old token isn't touched until the new one is confirmed live, so a failed run fails safe. Needs a one-time GITEA_ROTATION_TOKEN secret (a Gitea PAT with write:repository scope, no expiration) so the workflow can write to its own repo's secrets going forward - documented in README. After that, CODER_SESSION_TOKEN (used by coder-templates.yml) never needs manual attention again. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-15 12:02:22 +02:00
octoturgeandClaude Sonnet 5	a9583535f0	Add Gitea Actions workflow to auto-provision Coder templates ... .gitea/workflows/coder-templates.yml pushes every templates/<env>/ dir to Coder as profiles-<env> on every push to main that touches templates/**, scripts/**, or profile-templates/** - coder templates push creates the template on first run and updates it thereafter, so adding a new templates/<env>/ directory is enough to provision it, no workflow edits needed. It also diffs templates/ against the previous commit and runs `coder templates delete profiles-<env>` for any directory that was removed. Deletion fails (loudly, as a job warning, not a hard failure) rather than succeeding if the template still has active workspaces, since coder templates delete already refuses that server-side. Runs on the ubuntu-latest self-hosted Gitea runner already registered on this instance (confirmed via gitea-runner-1's /data/.runner labels) and installs the coder CLI itself. Needs CODER_URL and CODER_SESSION_TOKEN as repo/org Actions secrets - documented in README, left for the user to set up since token creation needs their own Coder login. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-15 11:49:56 +02:00