add gitea db pass to agenix

hosts/profiles/gitea/default.nix

@@ -1,6 +1,9 @@
-{ config, lib, pkgs, ... }:
+{ self, config, lib, pkgs, ... }:
 
 {
+  age.secrets.gitea-dbpass.file = "${self}/secrets/gitea-dbpass.age";
+  age.secrets.gitea-dbpass.owner = "gitea";
+
   services.gitea = {
     enable = true;
     appName = "Sealight Git Forge";
@@ -9,8 +12,7 @@
     httpPort = 3001;
     database = {
       type = "postgres";
-      # passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix
-      password = "somethingunknowablesorry";
+      passwordFile = "/run/agenix/gitea-dbpass";
     };
     settings = {
       metrics = {
@@ -19,10 +21,11 @@
       repository = {
         DEFAULT_BRANCH = "main";
       };
+      # TODO
       "markup.restructuredtext" = {
         ENABLED = true;
         FILE_EXTENSIONS = ".rst";
-        RENDER_COMMAND = "timeout 30s pandoc +RTS -M512M -RTS -f rst";
+        RENDER_COMMAND = "pandoc +RTS -M512M -RTS -f rst";
         IS_INPUT_FILE = false;
       };
       # TODO 

secrets/gitea-dbpass.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 kgCrKA /u5qYf6vYBVeJryLq2xvZHXk9LY2A8+ks/XV4C/fixw
+HNLXInIHa2d/CZR8/OwwhfLurpEbxiXca8Ip3kp/EWg
+-> s9b#/i%D-grease
+DtUrN1QNHQyj0mSiV9nAOBpjf1/3yxxV4E4Xxr0oR2kJa/VWvpIYzyReZdRpS5Xs
+Qf0Rw1HB9OAMAQ04DuR6FVfGYaGm
+--- WszM9cCBr4HW0I+HltsdXj/BCxUDMld4yAVzXVo1HLg
+4µEíàݾöGT/ÅCÁ°¸ƒªBñ’šrò©ø¢£XYëµW<C2B5>ÀfröÅý|e5÷÷}PÄ)

secrets/secrets.nix

@@ -21,9 +21,9 @@ in
   "sealight-mod-password.age".publicKeys = [ lituus ];
   "telegram-matrix-env.age".publicKeys = [ lituus ];
 
-  # "wallabag.age".publicKeys = [ mossnet ];
-  "woodpecker-agent-secret".publicKeys = [ lituus helix ];
-  "woodpecker-client-id".publicKeys = [ helix ];
-  "woodpecker-client-secret".publicKeys = [ helix ];
-  "gitea-dbpass".publicKeys = [ helix ];
+  "wallabag.age".publicKeys = [ mossnet ];
+  "woodpecker-agent-secret.age".publicKeys = [ lituus helix ];
+  "woodpecker-client-id.age".publicKeys = [ helix ];
+  "woodpecker-client-secret.age".publicKeys = [ helix ];
+  "gitea-dbpass.age".publicKeys = [ helix ];
 }