From b4d80e9d9dda48d32ddf5852d5e4ceccafb668d5 Mon Sep 17 00:00:00 2001 From: Workstation Bot Date: Fri, 31 Jul 2026 15:42:00 +0000 Subject: [PATCH] Publish through Garage Replicated --- .forgejo/workflows/deploy.yml | 8 ++++---- docs/SECURITY.md | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml index 6ad3a548..86ffca93 100644 --- a/.forgejo/workflows/deploy.yml +++ b/.forgejo/workflows/deploy.yml @@ -63,10 +63,10 @@ jobs: - name: Publish main to Garage if: github.ref == 'refs/heads/main' env: - AWS_ACCESS_KEY_ID: ${{ secrets.GARAGE_SITES_ACCESS_KEY_ID }} - AWS_SECRET_ACCESS_KEY: ${{ secrets.GARAGE_SITES_SECRET_ACCESS_KEY }} - AWS_DEFAULT_REGION: garage-sites - GARAGE_S3_ENDPOINT: https://s3-sites.bcgen.ie + AWS_ACCESS_KEY_ID: ${{ secrets.GARAGE_REPLICATED_ACCESS_KEY_ID }} + AWS_SECRET_ACCESS_KEY: ${{ secrets.GARAGE_REPLICATED_SECRET_ACCESS_KEY }} + AWS_DEFAULT_REGION: garage-replicated + GARAGE_S3_ENDPOINT: https://s3-replicated.bcgen.ie run: | set -eu aws=/opt/awscli/bin/aws diff --git a/docs/SECURITY.md b/docs/SECURITY.md index 5f7c4ceb..2dd54742 100644 --- a/docs/SECURITY.md +++ b/docs/SECURITY.md @@ -23,7 +23,7 @@ enabled on a non-default host, add that exact origin to `script-src`. The public website virtual host must accept HTTP/HTTPS traffic only from Cloudflare's published IPv4 and IPv6 ranges. Keep the S3 deployment API on -`s3-sites.bcgen.ie` reachable by Forgejo runners; do not apply the website +`s3-replicated.bcgen.ie` reachable by Forgejo runners; do not apply the website virtual-host restriction to the S3 API listener. Authenticated Origin Pulls or a Cloudflare Tunnel are preferable when supported by the origin proxy.