Gitea workflow: build the forge image on the forge itself (runs-on: ipcr → staging → IPFS)

.gitea/workflows/ipcr.yml

@@ -0,0 +1,42 @@
+# IPCR Forge: builds the forge service's image (forge/Dockerfile) for every v* tag pushed to this repository's Gitea copy, and pushes it
+# to the forge's staging registry; IPCR imports it from there within a minute and publishes it on
+# IPFS under the forge's name (<forge>/ipcr/ipcr-forge, and ipcr-forge at the root).
+#
+# GitHub ignores .gitea/ (it runs .github/workflows/image.yml → ghcr.io), and Gitea ignores
+# .github/ as soon as this folder exists: one repository, one workflow on each side.
+#
+#   runs-on: ipcr              the forge's own runner, the only one that reaches the staging registry
+#   localhost:5000             that registry, logged in to as this repository (IPCR_PUSH_TOKEN, a
+#                              secret the forge sets on every repository allowed to publish)
+#   network=host               so buildx's builder can reach it too
+name: ipcr
+on:
+  push:
+    tags: ['v*']
+jobs:
+  image:
+    runs-on: ipcr
+    steps:
+      - uses: actions/checkout@v4
+      - uses: docker/login-action@v3
+        with:
+          registry: localhost:5000
+          username: ${{ github.repository }}
+          password: ${{ secrets.IPCR_PUSH_TOKEN }}
+      - uses: docker/metadata-action@v5
+        id: meta
+        with:
+          images: localhost:5000/${{ github.repository }}
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=raw,value=latest
+      - uses: docker/setup-buildx-action@v3
+        with:
+          driver-opts: network=host
+      - uses: docker/build-push-action@v6
+        with:
+          context: forge
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}

forge/web/admin.html

@@ -332,7 +332,7 @@
       st8.textContent = "";
       publisher = s.key.id || "";
       $("key-name").textContent = s.key.name || "—";
-      $("key-id").textContent = publisher || "not created yet (the first import creates it)";
+      $("key-id").textContent = publisher || "not created yet (IPCR creates it when it starts: reload in a minute)";
       $("ens-value").textContent = "ipns://" + (publisher || "k51…");
       $("dns-value").textContent = "dnslink=/ipns/" + (publisher || "k51…");
       pubName = s.name && s.name.ok ? s.name.name : "";

forge/web/index.html

@@ -91,6 +91,7 @@ mirrored to the Radicle peer-to-peer network.</p>
   <a class="card" id="link-gitea" href="#"><b>Gitea</b><span>Your repositories, pull requests, issues and builds. Sign in as <code>gitea_admin</code>.</span></a>
   <a class="card" href="#images"><b>Published images</b><span>What this forge serves from IPFS, with the line to put in a compose file.</span></a>
   <a class="card" href="#repos" data-radicle><b>On Radicle</b><span>The public repositories mirrored to the Radicle network. Public.</span></a>
+  <a class="card" href="admin"><b>Admin</b><span>Your ENS or DNS name, which repositories publish, unpublishing, the publisher key backup. Gitea site admins only.</span></a>
 </div>
 
 <h2 id="how">How it works</h2>
@@ -242,6 +243,7 @@ for IPFS peers. Details: <a href="https://github.com/Yundera/ipcr" target="_blan
   <tr><th>Address</th><th>What</th></tr>
   <tr><td><a id="t-gitea" href="#"></a></td><td>Gitea: repositories, Actions, users (<code>gitea_admin</code>)</td></tr>
   <tr><td><a id="t-forge" href="#"></a></td><td>This page (public)</td></tr>
+  <tr><td><a id="t-admin" href="admin"></a></td><td>Admin pages: signed in with Gitea, site administrators only</td></tr>
   <tr data-radicle><td><a id="t-radicle" href="#"></a></td><td>Radicle explorer (public)</td></tr>
   <tr data-radicle><td><a id="t-radicle-api" href="#"></a></td><td>Radicle API and read-only git over HTTPS (public)</td></tr>
   <tr><td><code>ipcr.localhost:4767</code></td><td>IPCR registry, for this server's Docker only</td></tr>
@@ -276,6 +278,7 @@ for IPFS peers. Details: <a href="https://github.com/Yundera/ipcr" target="_blan
   }
   setLink("t-gitea", "gitea", true);
   setLink("t-forge", "ipcr-forge", true);
+  document.getElementById("t-admin").textContent = (base ? "ipcr-forge-" + base : "ipcr-forge-<domain>") + "/admin";
   setLink("t-radicle", "radicle", true);
   setLink("t-radicle-api", "radicle-api", true);
   setLink("t-ipcr", "ipcr", true);