From 1f3f12b59df11b1bb4af301a54c214b8f6ad784d Mon Sep 17 00:00:00 2001
From: TheGeneralist <180094941+thegeneralist01@users.noreply.github.com>
Date: Sat, 24 Jan 2026 17:39:38 +0100
Subject: [PATCH] forgejo: add deploy token secret

---
 hosts/thegeneralist-central/forgejo/default.nix | 1 +
 secrets.nix                                     | 1 +
 2 files changed, 2 insertions(+)

diff --git a/hosts/thegeneralist-central/forgejo/default.nix b/hosts/thegeneralist-central/forgejo/default.nix
index c5f0a7f..24f2ed5 100644
--- a/hosts/thegeneralist-central/forgejo/default.nix
+++ b/hosts/thegeneralist-central/forgejo/default.nix
@@ -10,6 +10,7 @@ in
   imports = [ ../../../modules/postgresql.nix ];
 
   age.secrets.forgejoRunnerToken.file = ./forgejo-runner-token.age;
+  age.secrets.forgejoFamilySiteDeployToken.file = ./forgejo-family-site-deploy-token.age;
 
   services.forgejo = {
     enable = true;
diff --git a/secrets.nix b/secrets.nix
index a54671f..d73e7ab 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -11,6 +11,7 @@ in {
   "hosts/thegeneralist-central/cache/key.age".publicKeys = [ thegeneralist ];
   "hosts/thegeneralist-central/password.age".publicKeys = [ thegeneralist ];
   "hosts/thegeneralist-central/forgejo/forgejo-runner-token.age".publicKeys = [ thegeneralist ];
+  "hosts/thegeneralist-central/forgejo/forgejo-family-site-deploy-token.age".publicKeys = [ thegeneralist ];
 
   "modules/linux/tailscale-marshall.age".publicKeys = [ thegeneralist ];
 }