Merge pull request 'Publish through Garage Replicated' (#12) from codex/garage-replicated-publisher into main

.forgejo/workflows/deploy.yml

@@ -63,10 +63,10 @@ jobs:
       - name: Publish main to Garage
         if: github.ref == 'refs/heads/main'
         env:
-          AWS_ACCESS_KEY_ID: ${{ secrets.GARAGE_SITES_ACCESS_KEY_ID }}
+          AWS_ACCESS_KEY_ID: ${{ secrets.GARAGE_REPLICATED_ACCESS_KEY_ID }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.GARAGE_SITES_SECRET_ACCESS_KEY }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.GARAGE_REPLICATED_SECRET_ACCESS_KEY }}
-          AWS_DEFAULT_REGION: garage-sites
+          AWS_DEFAULT_REGION: garage-replicated
-          GARAGE_S3_ENDPOINT: https://s3-sites.bcgen.ie
+          GARAGE_S3_ENDPOINT: https://s3-replicated.bcgen.ie
         run: |
           set -eu
           aws=/opt/awscli/bin/aws

docs/SECURITY.md

@@ -23,7 +23,7 @@ enabled on a non-default host, add that exact origin to `script-src`.
 
 The public website virtual host must accept HTTP/HTTPS traffic only from
 Cloudflare's published IPv4 and IPv6 ranges. Keep the S3 deployment API on
-`s3-sites.bcgen.ie` reachable by Forgejo runners; do not apply the website
+`s3-replicated.bcgen.ie` reachable by Forgejo runners; do not apply the website
 virtual-host restriction to the S3 API listener. Authenticated Origin Pulls or
 a Cloudflare Tunnel are preferable when supported by the origin proxy.