prescientmoon/satellite
1
Fork 0
Code Activity

Fix perms for forgejo mailer password

Browse source
This commit is contained in:
prescientmoon 2024-05-11 01:22:34 +02:00
parent eb808571bb
commit cd309dd510
Signed by: prescientmoon
SSH key fingerprint: SHA256:UUF9JT2s8Xfyv76b8ZuVL7XrmimH4o49p4b+iexbVH4
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
hosts/nixos/lapetus/services/forgejo.nix
View file

@ -5,9 +5,13 @@ let
cfg = config.services.forgejo;
in
{
sops.secrets.forgejo_mail_password.sopsFile = ../secrets.yaml;
sops.secrets.forgejo_mail_password = {
sopsFile = ../secrets.yaml;
owner = cfg.user;
group = cfg.group;
};
satellite.cloudflared.targets.${host}.port = port;
systemd.tmpfiles.rules = [ "d ${cfg.stateDir} 0700 ${cfg.user} ${cfg.user} -" ];
services.forgejo = {
enable = true;