unkinben
fd82876f5f
Add a data-driven 'user' config kind so Gitea accounts are declared as config/git.unkin.net/user/<name>.yaml, mirroring the existing repository and team kinds. Wire the yaml into a new modules/user submodule that creates a gitea_user (provider go-gitea/gitea 0.7.0, already pinned). The provider's user resource requires a password; generate a per-user random_password so nothing sensitive is hardcoded and only a placeholder lives in state (tokens come later from vault-plugin-secrets-gitea). Provision teabot's implementer and reviewer personality accounts with a conservative posture: not site admins, no org creation, no repo creation, limited profile visibility. Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
18 lines
318 B
Terraform
18 lines
318 B
Terraform
terraform {
|
|
required_version = ">= 1.10"
|
|
required_providers {
|
|
gitea = {
|
|
source = "go-gitea/gitea"
|
|
version = "0.7.0"
|
|
}
|
|
woodpecker = {
|
|
source = "Kichiyaki/woodpecker"
|
|
version = "0.5.0"
|
|
}
|
|
random = {
|
|
source = "hashicorp/random"
|
|
version = ">= 3.5"
|
|
}
|
|
}
|
|
}
|