deploy

bd5cf5d7d1f34fa780660fd7562b9ffd9746ee27

name	last commit	updated
cmc lfs: e2e for a token outliving its key; document the binding`bd5cf5d7d1` 10 days ago
Containerfile.ci	deploy: Containerfile.ci comment stages the file before podman build	28 days ago
audit.sh	Security hardening: fuzzing, headers, threat model, host sandbox	1 month ago
clonebench.sh	gitbayd: one pack-generation limit for SSH, HTTP and git://	10 days ago
cloud-init.yaml	docs: restore puts the secret key file back before starting gitbayd	10 days ago
copy.sh	deploy: one copy helper, so neither target assumes rsync	1 month ago
gitbay-runner-egress.nft	runner: builds reach the forge at pasta's host address	10 days ago
gitbay-runner-egress.service	runner egress: remove the rule when it blocks the runner's poll	10 days ago
gitbay-runner-prune.service	deploy: install the image prune timer with the runner	1 month ago
gitbay-runner-prune.timer	deploy, wiki: prepare a runner host for rootless podman	1 month ago
gitbay-runner.override.conf	deploy: runner comment and Admin procedure name the real attachments	10 days ago
install.sh	deploy, wiki: provision and document the secret key file	10 days ago
release.sh	deploy: the bay1 runner claims untrusted builds; release ships gitbay-runner	1 month ago
runner-egress-check.sh	runner egress: remove the rule when it blocks the runner's poll	10 days ago
runner-podman-setup.sh	runner host: builds reach only the forge's public ports on it	10 days ago