- ExecStart path matches the actual install location (/usr/local/sbin)
- .gitignore: bare '.runner' so the secret is ignored in any dir (was only runner/.runner)
- step 5: register inside ~/forgejo-runner (subshell), fix stray cd that broke
the later 'cp runner/...' paths; note how to relocate a misplaced .runner
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- README maintenance: reset admin password via UI or 'forgejo admin
user change-password' (no email/old password needed)
- .gitignore: secrets.local.md + *.local.secret so off-git credential
backups can never be committed
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Edge reverse proxy (TLS + label routing) and self-hosted Forgejo (git +
Actions + container registry) for joshbairstow.com, plus the desktop runner
config and the one-time bootstrap runbook.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
