harivansh-afk/nix
1
1
Fork 0
mirror of https://github.com/harivansh-afk/nix.git synced 2026-04-17 05:00:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

update runners

Browse source
This commit is contained in:
Harivansh Rathi 2026-04-06 02:04:57 +00:00
parent 84137476bd
commit ab03b04e8e
4 changed files with 103 additions and 123 deletions
Download patch file Download diff file Expand all files Collapse all files

19
hosts/netty/forgejo.nix
View file

@ -1,11 +1,14 @@
{
pkgs,
lib,
username,
...
}:
let
forgejoDomain = "git.harivan.sh";
forgejoApiUrl = "http://127.0.0.1:19300";
gitCredentialFile = "/var/lib/forgejo/.git-credentials";
mirrorEnvFile = "/etc/forgejo-mirror.env";
in
{
users.users.git = {
@ -16,11 +19,23 @@ in
};
users.groups.git = { };
# Generate git credential store for GitHub mirror fetches.
# Appended after the module's own preStart (which handles app.ini and migrations).
# preStart runs as the forgejo user (git), and the env file is world-readable.
systemd.services.forgejo.preStart = lib.mkAfter ''
. ${mirrorEnvFile}
printf 'https://oauth2:%s@github.com\n' "$GITHUB_TOKEN" > ${gitCredentialFile}
chmod 600 ${gitCredentialFile}
'';
services.forgejo = {
enable = true;
user = "git";
group = "git";
settings = {
"git.config" = {
"credential.helper" = "store --file ${gitCredentialFile}";
};
repository = {
FORCE_PRIVATE = true;
DEFAULT_PRIVATE = "private";
@ -41,6 +56,10 @@ in
DEFAULT_INTERVAL = "1h";
MIN_INTERVAL = "10m";
};
actions = {
ENABLED = true;
DEFAULT_ACTIONS_URL = "https://github.com";
};
};
};