Stopped daemon surfaces as 'Cannot connect to the Docker daemon' at the
build step (login works without it). Add the enable-at-boot recipe.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Repo-public does not imply package-public in Forgejo (packages are
owner-scoped, created on first push). Add verify-then-fix guidance.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
REGISTRY_USER/OWNER, REGISTRY_TOKEN, DEPLOY_HOST/USER/SSH_KEY each spelled
out with what to store and why, plus deploy-keypair generation.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- ExecStart path matches the actual install location (/usr/local/sbin)
- .gitignore: bare '.runner' so the secret is ignored in any dir (was only runner/.runner)
- step 5: register inside ~/forgejo-runner (subshell), fix stray cd that broke
the later 'cp runner/...' paths; note how to relocate a misplaced .runner
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
System service running as the desktop user (already in docker group); starts
at boot, auto-restarts, auto-claims queued jobs. WorkingDirectory under $HOME
because snap Docker can't read build contexts outside home. README step 5 now
covers binary install, registration, and enabling the service.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- README maintenance: reset admin password via UI or 'forgejo admin
user change-password' (no email/old password needed)
- .gitignore: secrets.local.md + *.local.secret so off-git credential
backups can never be committed
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- scripts/check-vps.sh: read-only reachability/ports/SSH-facts/DNS checker
- README: real IPv4/IPv6 + Debian 13 + existing swap; firewall already on Vultr
- DNS is managed at Cloudflare (NS delegated), not VentraIP — records must be
DNS-only (grey cloud) so Caddy issues real certs and port 222 works
- fix git remote to ssh:// form for the custom 222 port
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Edge reverse proxy (TLS + label routing) and self-hosted Forgejo (git +
Actions + container registry) for joshbairstow.com, plus the desktop runner
config and the one-time bootstrap runbook.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
