thegeneralist01/config
1
Fork 0
mirror of https://github.com/thegeneralist01/config.git synced 2026-05-30 08:37:01 +02:00
Code Issues Activity

Clean up retired site config

Browse source
This commit is contained in:
TheGeneralist 2026-05-26 18:39:20 +02:00
parent ec497ddace
commit 2f6b684b28
Signed by: thegeneralist01
SSH key fingerprint: SHA256:pp9qddbCNmVNoSjevdvQvM5z0DHN7LTa8qBMbcMq/R4
5 changed files with 5 additions and 91 deletions
Download patch file Download diff file Expand all files Collapse all files

12
hosts/thegeneralist-central/forgejo/default.nix
View file

@ -10,10 +10,6 @@ in
imports = [ ../../../modules/postgresql.nix ];
age.secrets.forgejoRunnerToken.file = ./forgejo-runner-token.age;
age.secrets.forgejoFamilySiteDeployToken.file = ./forgejo-family-site-deploy-token.age;
age.secrets.forgejoFamilySiteDeployToken.owner = "gitea-runner";
age.secrets.forgejoFamilySiteDeployToken.group = "gitea-runner";
age.secrets.forgejoFamilySiteDeployToken.mode = "0400";
services.forgejo = {
enable = true;
@ -158,15 +154,7 @@ in
systemd.tmpfiles.rules = [
"d /var/lib/gitea-runner 0755 gitea-runner gitea-runner -"
"d /var/lib/gitea-runner/central 0755 gitea-runner gitea-runner -"
# Allow gitea-runner (in group users) to write to the blog repo's .git dir.
"d /home/thegeneralist/blog 2770 thegeneralist users -"
"Z /home/thegeneralist/blog/.git - thegeneralist users -"
];
system.activationScripts.blogGitPerms.text = ''
${pkgs.coreutils}/bin/chmod -R g+rwX /home/thegeneralist/blog/.git/objects
${pkgs.acl}/bin/setfacl -R -m g:users:rwx -m d:g:users:rwx /home/thegeneralist/blog/.git/objects
'';
networking.firewall.allowedTCPPorts = [ 2222 ];
}