diff --git a/hosts/profiles/gitea/default.nix b/hosts/profiles/gitea/default.nix index 6fcfef4d..e5b4b702 100644 --- a/hosts/profiles/gitea/default.nix +++ b/hosts/profiles/gitea/default.nix @@ -1,6 +1,9 @@ -{ config, lib, pkgs, ... }: +{ self, config, lib, pkgs, ... }: { + age.secrets.gitea-dbpass.file = "${self}/secrets/gitea-dbpass.age"; + age.secrets.gitea-dbpass.owner = "gitea"; + services.gitea = { enable = true; appName = "Sealight Git Forge"; @@ -9,8 +12,7 @@ httpPort = 3001; database = { type = "postgres"; - # passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix - password = "somethingunknowablesorry"; + passwordFile = "/run/agenix/gitea-dbpass"; }; settings = { metrics = { @@ -19,10 +21,11 @@ repository = { DEFAULT_BRANCH = "main"; }; + # TODO "markup.restructuredtext" = { ENABLED = true; FILE_EXTENSIONS = ".rst"; - RENDER_COMMAND = "timeout 30s pandoc +RTS -M512M -RTS -f rst"; + RENDER_COMMAND = "pandoc +RTS -M512M -RTS -f rst"; IS_INPUT_FILE = false; }; # TODO diff --git a/secrets/gitea-dbpass.age b/secrets/gitea-dbpass.age new file mode 100644 index 00000000..28965819 --- /dev/null +++ b/secrets/gitea-dbpass.age @@ -0,0 +1,8 @@ +age-encryption.org/v1 +-> ssh-ed25519 kgCrKA /u5qYf6vYBVeJryLq2xvZHXk9LY2A8+ks/XV4C/fixw +HNLXInIHa2d/CZR8/OwwhfLurpEbxiXca8Ip3kp/EWg +-> s9b#/i%D-grease +DtUrN1QNHQyj0mSiV9nAOBpjf1/3yxxV4E4Xxr0oR2kJa/VWvpIYzyReZdRpS5Xs +Qf0Rw1HB9OAMAQ04DuR6FVfGYaGm +--- WszM9cCBr4HW0I+HltsdXj/BCxUDMld4yAVzXVo1HLg +4EݾGT/CBrXYWfr|e5}P) \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index 90f35a44..1471ad7f 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -21,9 +21,9 @@ in "sealight-mod-password.age".publicKeys = [ lituus ]; "telegram-matrix-env.age".publicKeys = [ lituus ]; - # "wallabag.age".publicKeys = [ mossnet ]; - "woodpecker-agent-secret".publicKeys = [ lituus helix ]; - "woodpecker-client-id".publicKeys = [ helix ]; - "woodpecker-client-secret".publicKeys = [ helix ]; - "gitea-dbpass".publicKeys = [ helix ]; + "wallabag.age".publicKeys = [ mossnet ]; + "woodpecker-agent-secret.age".publicKeys = [ lituus helix ]; + "woodpecker-client-id.age".publicKeys = [ helix ]; + "woodpecker-client-secret.age".publicKeys = [ helix ]; + "gitea-dbpass.age".publicKeys = [ helix ]; }