From 7fe549c8d020af9ae9978b0350087707ad520d0b Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Mon, 1 Dec 2025 21:34:19 +0100
Subject: [PATCH] forgejo: Remove auto user creation

---
 .../system/web-services/forgejo/default.nix   | 29 ++-----------------
 1 file changed, 2 insertions(+), 27 deletions(-)

diff --git a/modules/system/web-services/forgejo/default.nix b/modules/system/web-services/forgejo/default.nix
index 8b84dca..3bef43b 100644
--- a/modules/system/web-services/forgejo/default.nix
+++ b/modules/system/web-services/forgejo/default.nix
@@ -79,33 +79,8 @@ in
       };
     };
 
-    systemd.services.forgejo.preStart =
-      let
-        userCmd = "${lib.getExe config.services.forgejo.package} admin user";
-      in
-      ''
-        username="SebastianStork"
-        password="$(cat ${config.sops.secrets."forgejo/admin-password".path})"
-
-        create_user() {
-          ${userCmd} create \
-            --username "$username" \
-            --password "$password" \
-            --email "sebastian.stork@pm.me" \
-            --admin
-        }
-
-        reset_password() {
-          ${userCmd} change-password \
-            --username "$username" \
-            --password "$password" \
-            --must-change-password=false
-        }
-
-        if ! create_user; then
-          reset_password
-        fi
-      '';
+    # Create user: `forgejo-user create --admin --username NAME --email EMAIL --password PASSWORD`
+    environment.shellAliases.forgejo-user = "sudo --user=${config.services.forgejo.user} ${lib.getExe config.services.forgejo.package} admin user --config /var/lib/forgejo/custom/conf/app.ini";
 
     custom = {
       services = {