chadtmiller.com/knotless
git that lives in your Atmosphere account
1
10
The triage bot labels as triage.knotless.dev, an account of knotless's own
.knotless/workflows/deploy.yml+5−4
| @@ -37,10 +37,11 @@ env: | ||
KNOTLESS_DOMAIN: knotless.dev | ||
KNOTLESS_DATA: /mnt/data/knotless | ||
KNOTLESS_ADMIN_DIDS: did:plc:bcgltzqazw5tb6k2g3ttenbj | ||
# The runner's account (ci.knotless.dev), the triager's and the | ||
# reviewer's (review.knotless.dev), which log in at /oauth/bot for an | ||
# OAuth session that reads private repositories. | ||
KNOTLESS_BOT_DIDS: did:plc:ejh2v3z5ieqhqgz3ybk6r35x,did:plc:2exhgaq7ljarml6nx2xfvfk3,did:plc:kqi2glvzerg4dt66k64co2sl | ||
# The runner's account (ci.knotless.dev), the triager's | ||
# (triage.knotless.dev) and the reviewer's (review.knotless.dev), which | ||
# log in at /oauth/bot for an OAuth session that reads private | ||
# repositories. | ||
KNOTLESS_BOT_DIDS: did:plc:ejh2v3z5ieqhqgz3ybk6r35x,did:plc:hwfywp7r4cfumv54v2xk3jz7,did:plc:kqi2glvzerg4dt66k64co2sl | ||
# knotless, and the owner's deploys elsewhere, kept off the runner host | ||
# that runs anyone's code: each of their workflows given a secret names | ||
# ci.knotless.dev in `runners`, and its secrets are sealed to it alone. | ||
deploy/main.tf+1−1
| @@ -42,7 +42,7 @@ resource "cloudflare_record" "www" { | ||
| ||
# The handles of the service's own accounts under the zone, each a | ||
# `_atproto.<name>` TXT record naming its DID: the runner hosts', the prod | ||
# host's runner's (ci), the lexicon account's, the reviewer's. A handle whose name also serves | ||
# host's runner's (ci), the lexicon account's, the reviewer's, the triager's. A handle whose name also serves | ||
# /.well-known/atproto-did answers there first; these answer any resolver | ||
# that reads DNS. The `_lexicon` records are publish-lexicons.mjs's. | ||
resource "cloudflare_record" "handle" { | ||