From 27647e6c5cdb95ef5cf8a038459be350f244568b Mon Sep 17 00:00:00 2001
From: Felix Wolf <felix.wolf@blueworld-gmbh.de>
Date: Sat, 4 Apr 2026 17:37:44 +0200
Subject: [PATCH] docs: Removes Forgejo admin password hardcoding TODO

The issue regarding the hardcoded Forgejo admin password has been addressed and no longer needs to be tracked as a known issue or TODO.
---
 CLAUDE.md | 1 -
 1 file changed, 1 deletion(-)

diff --git a/CLAUDE.md b/CLAUDE.md
index 9c0f3dd..ada3553 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -66,7 +66,6 @@ kubectl apply -f rendered/envs/production/<app>/ --server-side  # Deploy
 
 
 ## Known Issues / TODOs
-- **Forgejo admin password**: Hardcoded in rendered secrets (`r8sA8CPHD9!bt6d`). Move to external secret before pushing to git.
 - **Namespace race condition**: First `kubectl apply` of a new app often fails because namespace isn't ready. Re-apply once.
 - **Traefik DaemonSet updates**: Requires `updateStrategy.rollingUpdate.maxSurge: 0` because hostPort conflicts prevent surge.
 - **Forgejo Ingress API version**: Chart renders `extensions/v1beta1`, fixed via `ytt/ingress-fix.ytt.yaml` overlay to `networking.k8s.io/v1`.