System service running as the desktop user (already in docker group); starts
at boot, auto-restarts, auto-claims queued jobs. WorkingDirectory under $HOME
because snap Docker can't read build contexts outside home. README step 5 now
covers binary install, registration, and enabling the service.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- README maintenance: reset admin password via UI or 'forgejo admin
user change-password' (no email/old password needed)
- .gitignore: secrets.local.md + *.local.secret so off-git credential
backups can never be committed
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- scripts/check-vps.sh: read-only reachability/ports/SSH-facts/DNS checker
- README: real IPv4/IPv6 + Debian 13 + existing swap; firewall already on Vultr
- DNS is managed at Cloudflare (NS delegated), not VentraIP — records must be
DNS-only (grey cloud) so Caddy issues real certs and port 222 works
- fix git remote to ssh:// form for the custom 222 port
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Edge reverse proxy (TLS + label routing) and self-hosted Forgejo (git +
Actions + container registry) for joshbairstow.com, plus the desktop runner
config and the one-time bootstrap runbook.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
