SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 19:51:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Enable forgejo on alto

Browse source
This commit is contained in:
SebastianStork 2025-05-26 21:51:56 +02:00
parent 5b81a54b48
commit 7f885a6297
3 changed files with 15 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

9
hosts/alto/default.nix
View file

@ -29,6 +29,10 @@ in
subdomain = "budget"; subdomain = "budget";
inherit (myConfig.actualbudget) port; inherit (myConfig.actualbudget) port;
}; };
forgejo = {
subdomain = "git";
inherit (myConfig.forgejo) port;
};
}; };
}; };
@ -42,6 +46,11 @@ in
inherit (caddyServe.actualbudget) subdomain; inherit (caddyServe.actualbudget) subdomain;
backups.enable = true; backups.enable = true;
}; };
forgejo = {
enable = true;
inherit (caddyServe.forgejo) subdomain;
};
syncthing = { syncthing = {
enable = true; enable = true;
deviceId = "5R2MH7T-Q2ZZS2P-ZMSQ2UJ-B6VBHES-XYLNMZ6-7FYC27L-4P7MGJ2-FY4ITQD"; deviceId = "5R2MH7T-Q2ZZS2P-ZMSQ2UJ-B6VBHES-XYLNMZ6-7FYC27L-4P7MGJ2-FY4ITQD";

13
hosts/alto/secrets.yaml
View file

@ -5,15 +5,13 @@ nextcloud:
admin-password: ENC[AES256_GCM,data:TepYe5rZox6aoa3jeIhmBxaZIQGpjjf+SAG8E39y,iv:cAanc3a5e3PF+BkiFjcME+PiTSRaNj/e78kT/RTbaxY=,tag:wbn4vWeDnSJH7jWu7hutVw==,type:str] admin-password: ENC[AES256_GCM,data:TepYe5rZox6aoa3jeIhmBxaZIQGpjjf+SAG8E39y,iv:cAanc3a5e3PF+BkiFjcME+PiTSRaNj/e78kT/RTbaxY=,tag:wbn4vWeDnSJH7jWu7hutVw==,type:str]
hedgedoc: hedgedoc:
seb-password: ENC[AES256_GCM,data:+pejm+Ju9l1jqY/8gpWRR6I5z3VEFzPxzw==,iv:0ji6ayKljy7LoZW423xcMmKJqsbon3JGzEb8KlbR2zs=,tag:sz8Szb8wA00U9Es0q0N/tw==,type:str] seb-password: ENC[AES256_GCM,data:+pejm+Ju9l1jqY/8gpWRR6I5z3VEFzPxzw==,iv:0ji6ayKljy7LoZW423xcMmKJqsbon3JGzEb8KlbR2zs=,tag:sz8Szb8wA00U9Es0q0N/tw==,type:str]
forgejo:
admin-password: ENC[AES256_GCM,data:opuQpLrpwkoaRLPmllMrnf1PXTPc1KvJLw==,iv:mfxM8XpQJvAYjKq+rCUhrg+OAaEre1KLayNgH9t4BvM=,tag:5IPFlI1T+j1lxvoPoHBMrQ==,type:str]
restic: restic:
environment: ENC[AES256_GCM,data:v1Ui5mG7Q98CFEpq7sSpzEf86cJAcRi+sqFdvy6ZPuY9dukJD2wAGt5fuNQkMzBCKAUTHb46ga1WYf9fZ5AUOPdA1MNrJWKrXlrsYh8ZJYKOgfEVBBYPUKKGcajILNQ5SzU=,iv:Asg4CWJbGqSZh8YaxcWA0Yxau1dE4ZV9JBJSiDHufGI=,tag:46pNMWoCbciEv4cIHo7KFQ==,type:str] environment: ENC[AES256_GCM,data:v1Ui5mG7Q98CFEpq7sSpzEf86cJAcRi+sqFdvy6ZPuY9dukJD2wAGt5fuNQkMzBCKAUTHb46ga1WYf9fZ5AUOPdA1MNrJWKrXlrsYh8ZJYKOgfEVBBYPUKKGcajILNQ5SzU=,iv:Asg4CWJbGqSZh8YaxcWA0Yxau1dE4ZV9JBJSiDHufGI=,tag:46pNMWoCbciEv4cIHo7KFQ==,type:str]
password: ENC[AES256_GCM,data:NVeqrWqtdgbhu3U7dAgwFeNLS9oPtnAPSrkGtvYD,iv:3l+9+bZfOpZdSCBKzXn5PqJvqo7mz/rj1tkihJqMHIs=,tag:JXigRR1adGlm8ehRv5wzIA==,type:str] password: ENC[AES256_GCM,data:NVeqrWqtdgbhu3U7dAgwFeNLS9oPtnAPSrkGtvYD,iv:3l+9+bZfOpZdSCBKzXn5PqJvqo7mz/rj1tkihJqMHIs=,tag:JXigRR1adGlm8ehRv5wzIA==,type:str]
healthchecks-ping-key: ENC[AES256_GCM,data:Cbk04CrYd9WcHnVRUed9aIImHbULhA==,iv:70cOOk5LfYciBx5baftFiBuquXY2welnjhoYmIB1iAQ=,tag:I5hqoai/HLdqUqonK77ubA==,type:str] healthchecks-ping-key: ENC[AES256_GCM,data:Cbk04CrYd9WcHnVRUed9aIImHbULhA==,iv:70cOOk5LfYciBx5baftFiBuquXY2welnjhoYmIB1iAQ=,tag:I5hqoai/HLdqUqonK77ubA==,type:str]
sops: sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age: age:
- recipient: age1mpq8m4p7dnxh5ze3fh7etd2k6sp85zdnmp9te3e9chcw4pw07pcq960zh5 - recipient: age1mpq8m4p7dnxh5ze3fh7etd2k6sp85zdnmp9te3e9chcw4pw07pcq960zh5
enc: | enc: |
@ -33,8 +31,7 @@ sops:
dEhnSkQ5SDlnbmhGSVdYaDNuc3ZkM00K7WPEZRYWAd7uGY0IcDwGgQVPrpkF/tnz dEhnSkQ5SDlnbmhGSVdYaDNuc3ZkM00K7WPEZRYWAd7uGY0IcDwGgQVPrpkF/tnz
ncj03JXM4BXwvEQOmD/i6wS4U4WCwkh9EauGJljVFTeu6TciomDULQ== ncj03JXM4BXwvEQOmD/i6wS4U4WCwkh9EauGJljVFTeu6TciomDULQ==
-----END AGE ENCRYPTED FILE----- -----END AGE ENCRYPTED FILE-----
lastmodified: "2025-05-18T17:19:37Z" lastmodified: "2025-05-26T18:22:58Z"
mac: ENC[AES256_GCM,data:Z+mPKBUj8FmY21crUs/2A9UUeMoBnWGoJuLcEP8atFZb+58LG5q+nbbsY0pCmpONldl29YAXs+lF5U5npPDVv2qr1jRql+LtAwLfkIYwDw2bmtAdcG1jWQWRgmUr1yloXzceB3Rv1l7ULbw0CJPkZbov2mosEFZFcHKnYbXp/jg=,iv:OepfEZh31s/AYHvg8s0IlW0Zi97BzZudwMGhB5EN4JM=,tag:wruPqU3qVU14dbOAArATCA==,type:str] mac: ENC[AES256_GCM,data:e7flwIEUUY2aZw4Uxn2YsIAvYpXIqn7Td3DFHutdxSClsTeg98bFXnQwYVqG5eI4S+/z+4C3EVXsI3XIKEvleyefBopvNPy3TSrooAd2ckVJFS51YMqVuz7QV/QX7loNHtT1GTWceSVkIFFKeC1FBsOffHhwVyduR40C4Ok3CWY=,iv:wPC+DyiBaergNoH495kmmSO9meZTB0i4D8lQkAWMBe8=,tag:gyGBh1kISbOaLvrTupofSw==,type:str]
pgp: []
unencrypted_suffix: _unencrypted unencrypted_suffix: _unencrypted
version: 3.9.4 version: 3.10.2

2
modules/system/forgejo/default.nix
View file

@ -42,6 +42,6 @@ in
createCmd = "${lib.getExe config.services.forgejo.package} admin user create"; createCmd = "${lib.getExe config.services.forgejo.package} admin user create";
passwordPath = config.sops.secrets."forgejo/admin-password".path; passwordPath = config.sops.secrets."forgejo/admin-password".path;
in in
''${createCmd} --username seb --password "$(cat ${passwordPath})" --email "sebastian.stork@pm.me" --admin || true''; ''${createCmd} --username SebastianStork --password "$(cat ${passwordPath})" --email "sebastian.stork@pm.me" --admin || true'';
}; };
} }