kind: context
name: gitea-admin
version: 1
description: "Gitea admin: SSH, git identity, API token for skynet org"
requires: []
provides: [gitea-admin]

git_identity:
  name: "agent-runtimes"
  email: "agent@oreillyit.nz"

ssh_hosts:
  - alias: gitea.oreillyit.nz-ai-enablement
    hostname: gitea.oreillyit.nz
    user: git
    identity_secret: SSH_KEY_AI_ENABLEMENT

secrets_required:
  # ESO-managed gitea-admin token (M22 Phase 9)
  - name: gitea-admin
    account_ref: "admin.space:platform"
    mount_path: /run/agent/secrets/gitea-admin
    mode: "0400"
  # Legacy SSH key (file-based, already delivered as mount)
  - name: SSH_KEY_AI_ENABLEMENT
    mount: /home/agent/.ssh/id_ed25519
    mode: "0600"

env:
  GITEA_BASE_URL: "https://gitea.oreillyit.nz"

scripts:
  init: ./init.sh