xengi/infra
Watch
0
1
Fork
You've already forked infra
 0
Code Pull requests Activity Actions 1

adapt secrets

Browse source
This commit is contained in:
XenGi 2026-07-31 19:53:52 +02:00
commit b9f8e595b7
Signed by: xengi
SSH key fingerprint: SHA256:jxWM2RTHvxxcncXycwwWkP7HCWb4VREN05UGJTbIPZg
1 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

18
flake.nix
View file

@ -238,29 +238,35 @@
{ environment.systemPackages = [ (agenix.packages.${system}.default) ]; } { environment.systemPackages = [ (agenix.packages.${system}.default) ]; }
{ {
age.secrets = { age.secrets = {
forgejo-internal-token = { postgres-forgejo = {
file = ./secrets/forgejo-internal-token.age; file = ./secrets/postgres-forgejo.age;
mode = "440";
owner = "forgejo"; owner = "forgejo";
group = "forgejo"; group = "forgejo";
mode = "0400";
};
forgejo-internal-token = {
file = ./secrets/forgejo-internal-token.age;
owner = "forgejo";
group = "forgejo";
mode = "0440";
}; };
forgejo-secret-key = { forgejo-secret-key = {
file = ./secrets/forgejo-secret-key.age; file = ./secrets/forgejo-secret-key.age;
mode = "440";
owner = "forgejo"; owner = "forgejo";
group = "forgejo"; group = "forgejo";
mode = "0440";
}; };
forgejo-runner-token-snowden = { forgejo-runner-token-snowden = {
file = ./secrets/forgejo-runner-token-snowden.age; file = ./secrets/forgejo-runner-token-snowden.age;
mode = "444";
owner = "root"; owner = "root";
group = "root"; group = "root";
mode = "0444";
}; };
forgejo-runner-token-snowden-env = { forgejo-runner-token-snowden-env = {
file = ./secrets/forgejo-runner-token-snowden-env.age; file = ./secrets/forgejo-runner-token-snowden-env.age;
mode = "444";
owner = "root"; owner = "root";
group = "root"; group = "root";
mode = "0444";
}; };
}; };
} }