add gitea db pass to agenix
This commit is contained in:
		
							parent
							
								
									7fbbe71a39
								
							
						
					
					
						commit
						5e82b2563c
					
				|  | @ -1,6 +1,9 @@ | |||
| { config, lib, pkgs, ... }: | ||||
| { self, config, lib, pkgs, ... }: | ||||
| 
 | ||||
| { | ||||
|   age.secrets.gitea-dbpass.file = "${self}/secrets/gitea-dbpass.age"; | ||||
|   age.secrets.gitea-dbpass.owner = "gitea"; | ||||
| 
 | ||||
|   services.gitea = { | ||||
|     enable = true; | ||||
|     appName = "Sealight Git Forge"; | ||||
|  | @ -9,8 +12,7 @@ | |||
|     httpPort = 3001; | ||||
|     database = { | ||||
|       type = "postgres"; | ||||
|       # passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix | ||||
|       password = "somethingunknowablesorry"; | ||||
|       passwordFile = "/run/agenix/gitea-dbpass"; | ||||
|     }; | ||||
|     settings = { | ||||
|       metrics = { | ||||
|  | @ -19,10 +21,11 @@ | |||
|       repository = { | ||||
|         DEFAULT_BRANCH = "main"; | ||||
|       }; | ||||
|       # TODO | ||||
|       "markup.restructuredtext" = { | ||||
|         ENABLED = true; | ||||
|         FILE_EXTENSIONS = ".rst"; | ||||
|         RENDER_COMMAND = "timeout 30s pandoc +RTS -M512M -RTS -f rst"; | ||||
|         RENDER_COMMAND = "pandoc +RTS -M512M -RTS -f rst"; | ||||
|         IS_INPUT_FILE = false; | ||||
|       }; | ||||
|       # TODO  | ||||
|  |  | |||
							
								
								
									
										8
									
								
								secrets/gitea-dbpass.age
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										8
									
								
								secrets/gitea-dbpass.age
									
									
									
									
									
										Normal file
									
								
							|  | @ -0,0 +1,8 @@ | |||
| age-encryption.org/v1 | ||||
| -> ssh-ed25519 kgCrKA /u5qYf6vYBVeJryLq2xvZHXk9LY2A8+ks/XV4C/fixw | ||||
| HNLXInIHa2d/CZR8/OwwhfLurpEbxiXca8Ip3kp/EWg | ||||
| -> s9b#/i%D-grease | ||||
| DtUrN1QNHQyj0mSiV9nAOBpjf1/3yxxV4E4Xxr0oR2kJa/VWvpIYzyReZdRpS5Xs | ||||
| Qf0Rw1HB9OAMAQ04DuR6FVfGYaGm | ||||
| --- WszM9cCBr4HW0I+HltsdXj/BCxUDMld4yAVzXVo1HLg | ||||
| 4µEíàݾöGT/ÅCÁ°¸ƒªBñ’šrò©ø¢£XYëµW<C2B5>ÀfröÅý|e5÷÷}PÄ) | ||||
|  | @ -21,9 +21,9 @@ in | |||
|   "sealight-mod-password.age".publicKeys = [ lituus ]; | ||||
|   "telegram-matrix-env.age".publicKeys = [ lituus ]; | ||||
| 
 | ||||
|   # "wallabag.age".publicKeys = [ mossnet ]; | ||||
|   "woodpecker-agent-secret".publicKeys = [ lituus helix ]; | ||||
|   "woodpecker-client-id".publicKeys = [ helix ]; | ||||
|   "woodpecker-client-secret".publicKeys = [ helix ]; | ||||
|   "gitea-dbpass".publicKeys = [ helix ]; | ||||
|   "wallabag.age".publicKeys = [ mossnet ]; | ||||
|   "woodpecker-agent-secret.age".publicKeys = [ lituus helix ]; | ||||
|   "woodpecker-client-id.age".publicKeys = [ helix ]; | ||||
|   "woodpecker-client-secret.age".publicKeys = [ helix ]; | ||||
|   "gitea-dbpass.age".publicKeys = [ helix ]; | ||||
| } | ||||
|  |  | |||
		Loading…
	
		Reference in a new issue