xengi/infra
Watch
0
1
Fork
You've already forked infra
 0
Code Pull requests Activity Actions

Compare commits

base: xengi:6622d5ee88f973a04e95381e2e03eacdde25df60
Branches Tags
xengi:main
xengi:wip
..
compare: xengi:f68ede169561b67b02cf86ef77c99b85d8ce0bd2
Branches Tags
xengi:main
xengi:wip
2 changed files with 5 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

14
flake.nix
View file

@ -238,35 +238,29 @@
{ environment.systemPackages = [ (agenix.packages.${system}.default) ]; } { environment.systemPackages = [ (agenix.packages.${system}.default) ]; }
{ {
age.secrets = { age.secrets = {
postgres-forgejo = {
file = ./secrets/postgres-forgejo.age;
owner = "forgejo";
group = "forgejo";
mode = "0400";
};
forgejo-internal-token = { forgejo-internal-token = {
file = ./secrets/forgejo-internal-token.age; file = ./secrets/forgejo-internal-token.age;
mode = "440";
owner = "forgejo"; owner = "forgejo";
group = "forgejo"; group = "forgejo";
mode = "0440";
}; };
forgejo-secret-key = { forgejo-secret-key = {
file = ./secrets/forgejo-secret-key.age; file = ./secrets/forgejo-secret-key.age;
mode = "440";
owner = "forgejo"; owner = "forgejo";
group = "forgejo"; group = "forgejo";
mode = "0440";
}; };
forgejo-runner-token-snowden = { forgejo-runner-token-snowden = {
file = ./secrets/forgejo-runner-token-snowden.age; file = ./secrets/forgejo-runner-token-snowden.age;
mode = "444";
owner = "root"; owner = "root";
group = "root"; group = "root";
mode = "0444";
}; };
forgejo-runner-token-snowden-env = { forgejo-runner-token-snowden-env = {
file = ./secrets/forgejo-runner-token-snowden-env.age; file = ./secrets/forgejo-runner-token-snowden-env.age;
mode = "444";
owner = "root"; owner = "root";
group = "root"; group = "root";
mode = "0444";
}; };
}; };
} }

2
hosts/git/forgejo.nix
View file

@ -51,7 +51,7 @@ in
createDatabase = false; createDatabase = false;
host = "sql.${config.networking.domain}"; host = "sql.${config.networking.domain}";
name = "git"; name = "git";
passwordFile = config.age.secrets.postgresql-forgejo.path; passwordFile = config.age.secrets.postgresql_forgejo.path;
port = 5432; port = 5432;
user = "git"; user = "git";
type = "postgres"; type = "postgres";