wip: auto repo local copy via cronjob

explaination: https://www.redhat.com/en/blog/sudo-rootless-podman

orchestrating/.config/rc/init.d/podman-containers

@@ -14,7 +14,9 @@ command="$PODMAN"
 command_args="start --all --filter restart-policy=always"
 name="podman-containers"
 command_background=true
+command_user=hane
 pidfile="/var/run/${RC_SVCNAME}.pid"
+#pidfile="/tmp/xdg/$UID-xdg-runtime-dir/${RC_SVCNAME}.pid"
 output_log="/home/${CONTAINER_USER:-$DEFAULT_CONTAINER_USER}/pihanepi/orchestrating/${RC_SVCNAME}.log"
 error_log="/home/${CONTAINER_USER:-$DEFAULT_CONTAINER_USER}/pihanepi/orchestrating/${RC_SVCNAME}.err"
 
@@ -25,18 +27,18 @@ error_log="/home/${CONTAINER_USER:-$DEFAULT_CONTAINER_USER}/pihanepi/orchestrati
 
 start() {
   ebegin "Starting Podman containers with restart policy"
-  doas -u "$CONTAINER_USER" "$PODMAN" start --all --filter restart-policy=$RESTART_POLICY
+  "$PODMAN" start --all --filter restart-policy=$RESTART_POLICY
   eend $?
 }
 
 stop() {
   ebegin "Stopping Podman containers with restart policy"
   
-  CONTAINERS=$(doas -u "$CONTAINER_USER" "$PODMAN" container ls --filter restart-policy=$RESTART_POLICY -q)
+  CONTAINERS=$("$PODMAN" container ls --filter restart-policy=$RESTART_POLICY -q)
   
   if [ -n "$CONTAINERS" ]; then
     for CONTAINER in $CONTAINERS; do
-     doas -u "$CONTAINER_USER" "$PODMAN" stop "$CONTAINER"
+     "$PODMAN" stop "$CONTAINER"
     done
     eend $?
   else

orchestrating/cronjobs/README.org

@@ -0,0 +1 @@
+Make sure crond is running, and add each script to the user's crontab

orchestrating/cronjobs/forgejo-clone/forgejo-clone.sh

@@ -0,0 +1,57 @@
+#!/usr/bin/env sh
+
+. secrets
+#TODO check secrets file exists
+
+#Retrieve token user
+user_json=$(curl -s -X 'GET' \
+'https://$GIT_DOMAIN/api/v1/user' \
+-H 'accept: application/json' \
+-H "Authorization: token ${AUTH_TOKEN}")
+
+user_id=$(jq ".id" <(echo "$user_json"))
+user_username=$(jq ".username" <(echo "$user_json"))
+echo $user_username
+
+#Retrieve repos from user, including private repos
+repo_json=$(curl -s -X 'GET' \
+  "https://$GIT_DOMAIN/api/v1/repos/search?uid=${user_id}?private=true" \
+  -H 'accept: application/json' \
+  -H "Authorization: token ${AUTH_TOKEN}")
+
+#Listing only the HTTPS repo clone URL
+repo_urls=$(jq ".data" <(echo "$repo_json") | jq ".[] | .html_url" | grep Hane)
+echo $repo_urls
+echo "----\n"
+
+#Cloning each repo to destdir
+i=0;
+finished=false;
+while ! $finished
+do
+  i=$(($i+1)); 
+  repo=$(awk "{print \$$i}" <(echo $repo_urls))
+  if [ "$repo" = "" ]
+  then
+    finished=true
+  else
+    #Retrieve repo name for folder
+    repo_name="$(awk -F/ '{print $5}' <(echo $repo))"
+    repo_name="${repo_name%\"}"
+    #echo $repo_name
+    #Remove quotes from user_username
+    username=${user_username%\"}
+    username=${username#\"}
+    #Clone repo
+    #TODO: what do if repo already exists? if it!
+    if [ -e "$REPO_DIR$repo_name" ]
+    then
+      echo "REPO: $repo_name"
+      git -C "$REPO_DIR$repo_name" fetch --all 
+      #git -C "$REPO_DIR$repo_name" rebase --update-refs 
+    else
+      git clone https://$user_username:$AUTH_TOKEN@$GIT_DOMAIN/$username/$repo_name  /home/$USER/pihanepi/datamount/gitbackup/$repo_name --recurse-submodules
+    fi
+  fi
+done
+

orchestrating/cronjobs/forgejo-clone/secrets

@@ -0,0 +1,3 @@
+REPO_DIR=/home/$USER/pihanepi/datamount/gitbackup/
+GIT_DOMAIN=git.roboces.dev
+AUTH_TOKEN=