SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 15:11:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

forgejo: Rename service user to git

Browse source
This commit is contained in:
SebastianStork 2025-09-12 23:15:28 +02:00
parent e5b6374751
commit 5074bbeae4
2 changed files with 14 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

14
modules/system/services/forgejo/default.nix
View file

@ -27,11 +27,23 @@ in
ports.tcp.list = [ cfg.port ]; ports.tcp.list = [ cfg.port ];
}; };
sops.secrets."forgejo/admin-password".owner = config.users.users.forgejo.name; sops.secrets."forgejo/admin-password".owner = config.users.users.git.name;
users = {
users.git = {
isSystemUser = true;
useDefaultShell = true;
group = config.users.groups.git.name;
home = config.services.forgejo.stateDir;
};
groups.git = { };
};
services.forgejo = { services.forgejo = {
enable = true; enable = true;
package = pkgs-unstable.forgejo; package = pkgs-unstable.forgejo;
user = "git";
group = "git";
lfs.enable = true; lfs.enable = true;
settings = { settings = {

2
modules/system/services/forgejo/ssh.nix
View file

@ -24,7 +24,7 @@ in
PasswordAuthentication = false; PasswordAuthentication = false;
KbdInteractiveAuthentication = false; KbdInteractiveAuthentication = false;
PermitRootLogin = "no"; PermitRootLogin = "no";
AllowUsers = [ config.users.users.forgejo.name ]; AllowUsers = [ config.services.forgejo.user ];
}; };
}; };
}; };