1
Fork 0
mirror of https://github.com/thegeneralist01/config.git synced 2026-03-07 10:59:55 +01:00

forgejo: use static runner user + non-private state

dir
This commit is contained in:
TheGeneralist 2026-01-24 17:18:59 +01:00
parent 8ccf9a1e1d
commit a9cc7b19d8
Signed by: thegeneralist01
SSH key fingerprint: SHA256:pp9qddbCNmVNoSjevdvQvM5z0DHN7LTa8qBMbcMq/R4

View file

@ -140,5 +140,13 @@ in
StateDirectoryMode = "0755";
};
users.groups.gitea-runner = { };
users.users.gitea-runner = {
isSystemUser = true;
group = "gitea-runner";
home = "/var/lib/gitea-runner/central";
createHome = true;
};
networking.firewall.allowedTCPPorts = [ 2222 ];
}