Migrate to alo organization

Update all registry paths from ppetru/* to alo/* and workflow
references from ppetru/alo-cluster to alo/alo-cluster.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

docs/CICD_SETUP.md

@@ -13,7 +13,7 @@ Your service needs a `flake.nix` that exports a Docker image:
   outputs = { self, nixpkgs, ... }: {
     # The workflow looks for this output by default
     dockerImage = pkgs.dockerTools.buildImage {
-      name = "gitea.v.paler.net/ppetru/<service>";
+      name = "gitea.v.paler.net/alo/<service>";
       tag = "latest";
       # ... image config
     };
@@ -78,7 +78,7 @@ on:
 
 jobs:
   deploy:
-    uses: ppetru/alo-cluster/.gitea/workflows/deploy-nomad.yaml@master
+    uses: alo/alo-cluster/.gitea/workflows/deploy-nomad.yaml@master
     with:
       service_name: <your-service>  # Must match Nomad job ID
     secrets: inherit
@@ -90,7 +90,7 @@ In Gitea → Your Repo → Settings → Actions → Secrets, add:
 
 | Secret | Value |
 |--------|-------|
-| `REGISTRY_USERNAME` | `ppetru` |
+| `REGISTRY_USERNAME` | Your Gitea username |
 | `REGISTRY_PASSWORD` | Gitea access token with `packages:write` |
 | `NOMAD_ADDR` | `http://nomad.service.consul:4646` |
 
@@ -117,7 +117,7 @@ Example with custom flake output:
 ```yaml
 jobs:
   deploy:
-    uses: ppetru/alo-cluster/.gitea/workflows/deploy-nomad.yaml@master
+    uses: alo/alo-cluster/.gitea/workflows/deploy-nomad.yaml@master
     with:
       service_name: myservice
       flake_output: packages.x86_64-linux.docker
@@ -131,7 +131,7 @@ Push to master
      ↓
 Build: nix build .#dockerImage
      ↓
-Push: skopeo → gitea.v.paler.net/ppetru/<service>:latest
+Push: skopeo → gitea.v.paler.net/alo/<service>:latest
      ↓
 Deploy: Update job meta.uuid → Nomad creates deployment
      ↓
@@ -192,7 +192,7 @@ cd <service-repo>
 nix build .#dockerImage
 skopeo copy --dest-authfile ~/.docker/config.json \
   docker-archive:result \
-  docker://gitea.v.paler.net/ppetru/<service>:latest
+  docker://gitea.v.paler.net/alo/<service>:latest
 nomad run /path/to/alo-cluster/services/<service>.hcl
 ```
 

docs/TODO

@@ -4,4 +4,4 @@
 * renovate system of some kind
 * vector (or other log ingestion) everywhere, consider moving it off docker if possible
 * monitor backup-persist success/fail
-
+* gitea organization is public -> at least from the internal network, anyone can pull images and probably also clone repos. there should be absolutely zero secrets in the repos (and the ones that are now should be changed before stored somewhere else) and the nomad workers should authenticate to pull images