From fed943a04e03fd3ac5411fae69a8344465eeda3a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?m=C3=BCde?= <git@darkest.space>
Date: Sun, 17 May 2026 00:25:55 +0200
Subject: [PATCH] hive-forge: pin F3 PATH absolute (init runs even when
 disabled)

forgejo's F3 init resolves data-dir before checking ENABLED, so
`forgejo admin user create` still fataled on the RO nix-store
default. set [F3] PATH = /var/lib/forgejo/data/f3 alongside the
disable.
---
 nix/modules/hive-forge.nix | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/nix/modules/hive-forge.nix b/nix/modules/hive-forge.nix
index 885acec..743834f 100644
--- a/nix/modules/hive-forge.nix
+++ b/nix/modules/hive-forge.nix
@@ -114,9 +114,15 @@ in
               log.LEVEL = "Warn";
               # F3 (federation) computes its data dir relative to the
               # forgejo binary, which lands in the read-only nix
-              # store and crashes the daemon at boot. We don't
-              # federate; turn it off.
-              "F3".ENABLED = false;
+              # store and crashes anything that touches the F3
+              # subsystem — including `forgejo admin user create`,
+              # which init-ses F3 even when ENABLED=false. Pin the
+              # path absolute alongside the disable so the init
+              # resolution succeeds before the flag is checked.
+              "F3" = {
+                ENABLED = false;
+                PATH = "/var/lib/forgejo/data/f3";
+              };
             };
           };
           environment.systemPackages = [ pkgs.forgejo ];