kind: context
name: gitea-ssh-hatchmate
version: 1
description: "Gitea SSH: clone/push via SSH key for gitea.oreillyit.nz (hatchmate org — agent working-repo key for hatchmate/hatchmate-agents)"
requires: []
provides: [git-access]
# HC-11: repos this layer's forge credential may push to (host-qualified; CRS-103 gate).
write_targets:
  - "gitea.oreillyit.nz/hatchmate/*"

git_identity:
  name: "agent-runtimes"
  email: "agent@oreillyit.nz"

ssh_hosts:
  - alias: gitea.oreillyit.nz-hatchmate
    hostname: gitea.oreillyit.nz
    user: git
    identity_secret: GITEA_SSH_KEY

scripts:
  init: "./init.sh"

secrets_required:
  - name: gitea-ssh-hatchmate
    account_ref: "hatchmate.space:hatchmate"
    mount_path: /run/agent/secrets/gitea-ssh-hatchmate
    mode: "0400"