Declare the forge-account provision, its provider bundle, its fact and the keys it reads (issue 955 F4)

modules/gitea/module.json

@@ -177,6 +177,12 @@
       "default": "mesh-tools mesh-admin jschoubben"
     }
   },
+  "facts": {
+    "forge-host": {
+      "path": "/etc/gitea/forge-host",
+      "template": "{{range .Machines}}{{if eq .Name $.Node}}{{.FQDN}}{{end}}{{end}}\n"
+    }
+  },
   "resources": [
     {
       "id": "mesh-state",
@@ -313,6 +319,13 @@
         "agent-read-teams"
       ]
     },
+    {
+      "id": "consumers",
+      "type": "file",
+      "path": "${dir:state}/consumers.json",
+      "mode": "0600",
+      "template": "files/consumers.json"
+    },
     {
       "id": "agent-teams",
       "type": "process",
@@ -353,6 +366,10 @@
         "issued-by": "software",
         "tool": "gitea_agent_token"
       }
+    },
+    {
+      "name": "forge-account",
+      "scope": "mesh"
     }
   ],
   "build": {
@@ -451,6 +468,25 @@
         "loads": [
           "agent-teams"
         ]
+      },
+      {
+        "name": "forge-account-provider",
+        "kind": "bundle",
+        "language": "go",
+        "system": "arch",
+        "from": "cmd/forge-account-provider",
+        "binary": "forge-account-provider",
+        "loads": [
+          "forge-account-provider"
+        ],
+        "env": {
+          "MESH_GITEA_URL": "http://127.0.0.1:${port:3000}",
+          "MESH_GITEA_ADMIN_USER": "mesh-admin",
+          "MESH_GITEA_ADMIN_PASSWORD_FILE": "${dir:state}/admin.secret",
+          "MESH_GITEA_ORIGINS_FILE": "${dir:mesh-state}/origins",
+          "MESH_GITEA_SSH_PORT": "222",
+          "MESH_FORGE_HOST_FILE": "/etc/gitea/forge-host"
+        }
       }
     ]
   },
@@ -460,5 +496,11 @@
       "failregex": "^.*Failed authentication attempt for .* from <HOST>(?::\\d+)?\\s*$\n            ^.*Invalid user .* from <HOST> port \\d+\\s*$\n            ^.*User \\S+ from <HOST> not allowed because .*$",
       "jail": "backend = systemd\njournalmatch = CONTAINER_NAME=gitea\nport = http,https,222\nmaxretry = 3\nfindtime = 1d\nbantime = 1d"
     }
+  ],
+  "state": [
+    "bound"
+  ],
+  "reads": [
+    "ssh-client.keys"
   ]
 }