chore(security): rotate forgejo secret_key + internal_token (#73) #82

Sammanfogat

supernaut sammanfogade 2 incheckningar från rotate-forgejo-core-secrets in i main

2026-07-17 14:45:59 +00:00

supernaut kommenterad

2026-07-17 14:06:49 +00:00

Ägare

Rotates vault_forgejo_secret_key and vault_forgejo_internal_token (both were exposed in a local agent-session transcript during the v16 upgrade verification, bitborg-infra#73). New values were generated with forgejo generate secret and are already live on prod (old podman secrets removed, role re-applied, service healthy; SSH/web/API verified). This PR just lands the vault state that prod now runs.

Rotates `vault_forgejo_secret_key` and `vault_forgejo_internal_token` (both were exposed in a local agent-session transcript during the v16 upgrade verification, bitborg-infra#73). New values were generated with `forgejo generate secret` and are **already live on prod** (old podman secrets removed, role re-applied, service healthy; SSH/web/API verified). This PR just lands the vault state that prod now runs.

supernaut lade till 1 incheckning

2026-07-17 14:06:49 +00:00

chore(security): rotate forgejo secret_key + internal_token (#73 )

ci / ci (pull_request) Successful in 1m33s

Detaljer

6734210e42

supernaut refererade till denna ändringsförfrågan

2026-07-17 14:07:19 +00:00

upgrade forgejo 15.0.4 → 16.0.0 #73

supernaut lade till 1 incheckning

2026-07-17 14:42:04 +00:00

docs(runbook): secret-key rotation re-encrypts actions secrets — procedure (#73 )