xengi/infra
Watch
0
1
Fork
You've already forked infra
 0
Code Pull requests Activity Actions

Compare commits

base: xengi:f68ede169561b67b02cf86ef77c99b85d8ce0bd2
Branches Tags
xengi:main
xengi:wip
...
compare: xengi:6622d5ee88f973a04e95381e2e03eacdde25df60
Branches Tags
xengi:main
xengi:wip
Author SHA1 Message Date
Ricardo (XenGi) Band
6622d5ee88
 		fix path 2026-07-31 19:54:44 +02:00
Ricardo (XenGi) Band
b9f8e595b7
 		adapt secrets 2026-07-31 19:53:52 +02:00
2 changed files with 11 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

18
flake.nix
View file

@ -238,29 +238,35 @@
{ environment.systemPackages = [ (agenix.packages.${system}.default) ]; } { environment.systemPackages = [ (agenix.packages.${system}.default) ]; }
{ {
age.secrets = { age.secrets = {
forgejo-internal-token = { postgres-forgejo = {
file = ./secrets/forgejo-internal-token.age; file = ./secrets/postgres-forgejo.age;
mode = "440";
owner = "forgejo"; owner = "forgejo";
group = "forgejo"; group = "forgejo";
mode = "0400";
};
forgejo-internal-token = {
file = ./secrets/forgejo-internal-token.age;
owner = "forgejo";
group = "forgejo";
mode = "0440";
}; };
forgejo-secret-key = { forgejo-secret-key = {
file = ./secrets/forgejo-secret-key.age; file = ./secrets/forgejo-secret-key.age;
mode = "440";
owner = "forgejo"; owner = "forgejo";
group = "forgejo"; group = "forgejo";
mode = "0440";
}; };
forgejo-runner-token-snowden = { forgejo-runner-token-snowden = {
file = ./secrets/forgejo-runner-token-snowden.age; file = ./secrets/forgejo-runner-token-snowden.age;
mode = "444";
owner = "root"; owner = "root";
group = "root"; group = "root";
mode = "0444";
}; };
forgejo-runner-token-snowden-env = { forgejo-runner-token-snowden-env = {
file = ./secrets/forgejo-runner-token-snowden-env.age; file = ./secrets/forgejo-runner-token-snowden-env.age;
mode = "444";
owner = "root"; owner = "root";
group = "root"; group = "root";
mode = "0444";
}; };
}; };
} }

2
hosts/git/forgejo.nix
View file

@ -51,7 +51,7 @@ in
createDatabase = false; createDatabase = false;
host = "sql.${config.networking.domain}"; host = "sql.${config.networking.domain}";
name = "git"; name = "git";
passwordFile = config.age.secrets.postgresql_forgejo.path; passwordFile = config.age.secrets.postgresql-forgejo.path;
port = 5432; port = 5432;
user = "git"; user = "git";
type = "postgres"; type = "postgres";