infra_gateway: add GitHub and Forgejo OAuth providers to line env
Created by: jedmund
Summary
- Adds
GITHUB_OAUTH_CLIENT_IDandGITHUB_OAUTH_CLIENT_SECRETtoline.env.j2, sourced from vault - Adds
FORGEJO_INSTANCEStoline.env.j2, constructed from vault secrets + non-secret defaults (key, baseUrl, label) for thegit.atelier.houseinstance -
FORGEJO_INSTANCESrenders empty when vault vars are not set, hiding Forgejo from the picker
Vault variables to add
Run ansible-vault edit group_vars/infra_gateway/vault.yml and add:
line_github_oauth_client_id: ""
line_github_oauth_client_secret: ""
line_forgejo_client_id: ""
line_forgejo_client_secret: ""
OAuth app registration
-
GitHub: register at https://github.com/settings/developers — callback URL:
https://atelier.house/d/settings/connections/oauth/github/callback -
Forgejo: register OAuth2 app at
https://git.atelier.house— redirect URI:https://atelier.house/d/settings/connections/oauth/forgejo/callback