webpage: the four git-syncs read Gitea in-cluster; sidecars retry forever (--max-failures=-1); gate 6 keeps the --repo values identical

On 2026-10-19 09:24 the public path to Gitea failed once and the sidecar exited (max-failures defaults to 0).
Anonymous in-cluster fetch proven first (main and installer-v1.34.0 resolve to the public hashes).

manifests/webpage.yaml

@@ -296,14 +296,21 @@ spec:
         # ── The WEBSITE sync — tracks `main`, unchanged cadence ──────────────────────────────
         # Deliberately still a branch: the site is content, and a typo fix must reach felhom.eu in
         # thirty seconds without cutting a release. Only /scripts/ moved to a tag (R-110).
+        #
+        # All four git-syncs read Gitea IN-CLUSTER (plain HTTP, never leaves the cluster — the hub's own Gitea
+        # client does the same): no internet hop, so the pod can start during an internet outage (2026-10-19 09:24
+        # the public path failed once and the sidecar restarted). If the website ever leaves the DooPlex cluster,
+        # this must go back to https://gitea.dooplex.hu/admin/felhom.eu.git. `hostinstall_gates.py` gate 6 fails
+        # if the four `--repo` values differ.
         - name: git-sync
           image: registry.k8s.io/git-sync/git-sync:v4.4.0
           args:
-            - --repo=https://gitea.dooplex.hu/admin/felhom.eu.git
+            - --repo=http://gitea.gitea-system.svc.cluster.local:3000/admin/felhom.eu.git
             - --ref=main
             - --root=/git
             - --link=current
             - --period=30s
+            - --max-failures=-1  # an outage must not restart the sidecar (git-sync v4.4.0 main.go L922: <0 = retry forever)
             # Only sync the website subdirectory
             - --sparse-checkout-file=/etc/git-sync/sparse-checkout
           volumeMounts:
@@ -336,11 +343,12 @@ spec:
         - name: git-sync-scripts
           image: registry.k8s.io/git-sync/git-sync:v4.4.0
           args:
-            - --repo=https://gitea.dooplex.hu/admin/felhom.eu.git
+            - --repo=http://gitea.gitea-system.svc.cluster.local:3000/admin/felhom.eu.git
             - --ref=installer-v1.34.0
             - --root=/git-scripts
             - --link=current
             - --period=30s
+            - --max-failures=-1  # an outage must not restart the sidecar (git-sync v4.4.0 main.go L922: <0 = retry forever)
             - --sparse-checkout-file=/etc/git-sync-scripts/sparse-checkout
           volumeMounts:
             - name: git-data-scripts
@@ -365,7 +373,7 @@ spec:
         - name: git-sync-init
           image: registry.k8s.io/git-sync/git-sync:v4.4.0
           args:
-            - --repo=https://gitea.dooplex.hu/admin/felhom.eu.git
+            - --repo=http://gitea.gitea-system.svc.cluster.local:3000/admin/felhom.eu.git
             - --ref=main
             - --root=/git
             - --link=current
@@ -381,7 +389,7 @@ spec:
         - name: git-sync-scripts-init
           image: registry.k8s.io/git-sync/git-sync:v4.4.0
           args:
-            - --repo=https://gitea.dooplex.hu/admin/felhom.eu.git
+            - --repo=http://gitea.gitea-system.svc.cluster.local:3000/admin/felhom.eu.git
             - --ref=installer-v1.34.0
             - --root=/git-scripts
             - --link=current