From eb808571bbf7a2b678089a2e0271683625875dd9 Mon Sep 17 00:00:00 2001
From: prescientmoon <git@moonythm.dev>
Date: Sat, 11 May 2024 01:18:47 +0200
Subject: [PATCH] Fix forgejo perms

---
 hosts/nixos/lapetus/services/forgejo.nix | 2 ++
 hosts/nixos/tethys/default.nix           | 1 -
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/hosts/nixos/lapetus/services/forgejo.nix b/hosts/nixos/lapetus/services/forgejo.nix
index 9e6399f..aa8b526 100644
--- a/hosts/nixos/lapetus/services/forgejo.nix
+++ b/hosts/nixos/lapetus/services/forgejo.nix
@@ -2,10 +2,12 @@
 let
   port = 8419;
   host = "git.moonythm.dev";
+  cfg = config.services.forgejo;
 in
 {
   sops.secrets.forgejo_mail_password.sopsFile = ../secrets.yaml;
   satellite.cloudflared.targets.${host}.port = port;
+  systemd.tmpfiles.rules = [ "d ${cfg.stateDir} 0700 ${cfg.user} ${cfg.user} -" ];
 
   services.forgejo = {
     enable = true;
diff --git a/hosts/nixos/tethys/default.nix b/hosts/nixos/tethys/default.nix
index 294692d..b19a034 100644
--- a/hosts/nixos/tethys/default.nix
+++ b/hosts/nixos/tethys/default.nix
@@ -16,7 +16,6 @@
     ./hardware
     ./boot.nix
     ./services/syncthing.nix
-    ./services/forgejo.nix
   ];
   # }}}