Forgejo Actions Proxy

actions.hochguertel.work

Nginx reverse proxy for Forgejo runner action fetches — routes CI/CD action requests to the correct upstream based on org namespace.

Routing Tiers

Tier 1

data.forgejo.org — first-party actions

Official Forgejo-maintained actions. No authentication required.

Namespaces: actions/* forgejo-contrib/*

Tier 2

pastoral-oyster.pikapod.net — custom local actions

Home-grown actions hosted on the private Forgejo instance. Authenticated via token.

Namespaces: hochguertel-actions/*

Tier 3

github.com — fallback

Any org not matched by Tier 1 or Tier 2 is fetched directly from GitHub. Covers all third-party actions.

Examples: astral-sh/* docker/* goreleaser/* … everything else

Runner Configuration

Configure your Forgejo instance to use this proxy as the default actions URL:

        # /etc/gitea/app.ini (or Forgejo app.ini)

        [actions]

        ENABLED = true

        DEFAULT_ACTIONS_URL = https://actions.hochguertel.work

Endpoints

Health check

/healthz

Git smart HTTP (example)

/actions/checkout/info/refs

Custom action (example)

/hochguertel-actions/notify-webhook/info/refs