- .gitea/workflows/cd.yml: on push to main (bot/** or scripts/**),
build ci-ai-bot:latest on the Pi runner via DooD and force-recreate
the container with docker compose (no registry push needed)
- reusable-{ai-review,commands,security}.yml: replace hardcoded
192.168.178.103:11434 with ${{ vars.JETSON_OLLAMA_URL }} (org variable
set in conformallab → fallback to old IP if variable is missing)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
The Jetson Orin Nano (JetPack 7.2, Ollama on GPU) is live, so ci-ai runs fully
self-hosted: no Anthropic key, no cloud, no per-PR cost. AI_PROVIDER=ollama,
AI_BASE_URL=http://192.168.178.103:11434/v1. The Pi runner reaches it LAN-direct
(SNAT to .48, allowed by the Jetson UFW). Removed the dead ANTHROPIC_API_KEY
secret declarations.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
