xengi/infra
Watch
0
1
Fork
You've already forked infra
 0
Code Pull requests Activity Actions 1

adapt secrets

Browse source
This commit is contained in:
XenGi 2026-07-31 19:53:52 +02:00
commit b9f8e595b7
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
1 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

18
flake.nix
View file

@ -238,29 +238,35 @@
{ environment.systemPackages = [ (agenix.packages.${system}.default) ]; }
{
age.secrets = {
forgejo-internal-token = {
file = ./secrets/forgejo-internal-token.age;
mode = "440";
postgres-forgejo = {
file = ./secrets/postgres-forgejo.age;
owner = "forgejo";
group = "forgejo";
mode = "0400";
};
forgejo-internal-token = {
file = ./secrets/forgejo-internal-token.age;
owner = "forgejo";
group = "forgejo";
mode = "0440";
};
forgejo-secret-key = {
file = ./secrets/forgejo-secret-key.age;
mode = "440";
owner = "forgejo";
group = "forgejo";
mode = "0440";
};
forgejo-runner-token-snowden = {
file = ./secrets/forgejo-runner-token-snowden.age;
mode = "444";
owner = "root";
group = "root";
mode = "0444";
};
forgejo-runner-token-snowden-env = {
file = ./secrets/forgejo-runner-token-snowden-env.age;
mode = "444";
owner = "root";
group = "root";
mode = "0444";
};
};
}