chadtmiller.com/knotless
git that lives in your Atmosphere account
1
10
The runner logs in at /oauth/bot as ci.knotless.dev, not the owner
.knotless/workflows/deploy.yml+4−3
| @@ -37,9 +37,10 @@ env: | ||
KNOTLESS_DOMAIN: knotless.dev | ||
KNOTLESS_DATA: /mnt/data/knotless | ||
KNOTLESS_ADMIN_DIDS: did:plc:bcgltzqazw5tb6k2g3ttenbj | ||
# The runner's account and the triager's, which log in at /oauth/bot | ||
# for an OAuth session that reads private repositories. | ||
KNOTLESS_BOT_DIDS: did:plc:bcgltzqazw5tb6k2g3ttenbj,did:plc:2exhgaq7ljarml6nx2xfvfk3 | ||
# The runner's account (ci.knotless.dev), the triager's and the | ||
# reviewer's (review.knotless.dev), which log in at /oauth/bot for an | ||
# OAuth session that reads private repositories. | ||
KNOTLESS_BOT_DIDS: did:plc:ejh2v3z5ieqhqgz3ybk6r35x,did:plc:2exhgaq7ljarml6nx2xfvfk3,did:plc:kqi2glvzerg4dt66k64co2sl | ||
KNOTLESS_RUN_REPOS: chadtmiller.com/knotless | ||
# Lands the merge queue in batches. Open pulls run on the runner host | ||
# (--pulls-only there, deploy/runner-host), off this one's CPU. | ||
deploy/main.tf+2−2
| @@ -41,8 +41,8 @@ resource "cloudflare_record" "www" { | ||
} | ||
| ||
# The handles of the service's own accounts under the zone, each a | ||
# `_atproto.<name>` TXT record naming its DID: the runner hosts', the lexicon | ||
# account's, the reviewer's. A handle whose name also serves | ||
# `_atproto.<name>` TXT record naming its DID: the runner hosts', the prod | ||
# host's runner's (ci), the lexicon account's, the reviewer's. A handle whose name also serves | ||
# /.well-known/atproto-did answers there first; these answer any resolver | ||
# that reads DNS. The `_lexicon` records are publish-lexicons.mjs's. | ||
resource "cloudflare_record" "handle" { | ||
deploy/terraform.tfvars.example+1−0
| @@ -8,6 +8,7 @@ handles = { | ||
runner = "did:plc:…" | ||
lexicons = "did:plc:…" | ||
review = "did:plc:…" | ||
ci = "did:plc:…" | ||
} | ||
runner_ipv4 = "203.0.113.20" | ||
runner_ipv6 = "2001:db8::20" | ||