Compare commits
No commits in common. "866f8b1b908576676ab07f13ae12790176e19df6" and "13ab4ae245a6e160172e0c19173a97bfa1f158eb" have entirely different histories.
866f8b1b90
...
13ab4ae245
2 changed files with 7 additions and 14 deletions
|
@ -2,10 +2,10 @@
|
||||||
|
|
||||||
let
|
let
|
||||||
svc_domain = "git.${config.mine.shared.settings.domain}";
|
svc_domain = "git.${config.mine.shared.settings.domain}";
|
||||||
|
|
||||||
in {
|
in {
|
||||||
services.forgejo = {
|
services.forgejo = {
|
||||||
enable = true;
|
enable = true;
|
||||||
stateDir = config.mine.zfsMounts."rpool/safe/svcs/forgejo";
|
|
||||||
|
|
||||||
package = pkgs.forgejo.overrideAttrs (old: {
|
package = pkgs.forgejo.overrideAttrs (old: {
|
||||||
patches = old.patches ++ [
|
patches = old.patches ++ [
|
||||||
|
@ -14,9 +14,7 @@ in {
|
||||||
];
|
];
|
||||||
});
|
});
|
||||||
|
|
||||||
# use postgres, will create and start postgresql
|
stateDir = config.mine.zfsMounts."rpool/safe/svcs/forgejo";
|
||||||
# itself, as well as databdase and user
|
|
||||||
database.type = "postgres";
|
|
||||||
|
|
||||||
settings = {
|
settings = {
|
||||||
server = {
|
server = {
|
||||||
|
|
|
@ -152,11 +152,6 @@ in {
|
||||||
# secrets
|
# secrets
|
||||||
secretFile = config.age.secrets.nextcloud-secrets.path;
|
secretFile = config.age.secrets.nextcloud-secrets.path;
|
||||||
|
|
||||||
# use postgresql for database
|
|
||||||
# createLocally will enable postgresql, add database and user
|
|
||||||
database.createLocally = true;
|
|
||||||
config.dbtype = "pgsql";
|
|
||||||
|
|
||||||
# settings
|
# settings
|
||||||
settings = {
|
settings = {
|
||||||
# open connect/oidc
|
# open connect/oidc
|
||||||
|
@ -198,6 +193,11 @@ in {
|
||||||
serviceConfig.RemainAfterExit = true;
|
serviceConfig.RemainAfterExit = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
# ensure that nextcloud can access stateDir
|
||||||
|
systemd.tmpfiles.rules = [
|
||||||
|
"Z ${stateDir} 6770 ${nextcloud_user} ${nextcloud_group} -"
|
||||||
|
];
|
||||||
|
|
||||||
# setup authelia for nextcloud
|
# setup authelia for nextcloud
|
||||||
services.authelia.instances.main.settings.identity_providers.oidc.clients = [{
|
services.authelia.instances.main.settings.identity_providers.oidc.clients = [{
|
||||||
client_id = AUTHELIA_AUTH_NAME;
|
client_id = AUTHELIA_AUTH_NAME;
|
||||||
|
@ -217,11 +217,6 @@ in {
|
||||||
enableACME = true;
|
enableACME = true;
|
||||||
};
|
};
|
||||||
|
|
||||||
# ensure that nextcloud can access stateDir
|
|
||||||
systemd.tmpfiles.rules = [
|
|
||||||
"Z ${stateDir} 6770 ${nextcloud_user} ${nextcloud_group} -"
|
|
||||||
];
|
|
||||||
|
|
||||||
age.secrets = {
|
age.secrets = {
|
||||||
nextcloud-admin-pass.owner = nextcloud_user;
|
nextcloud-admin-pass.owner = nextcloud_user;
|
||||||
nextcloud-secrets.owner = nextcloud_user;
|
nextcloud-secrets.owner = nextcloud_user;
|
||||||
|
|
Loading…
Reference in a new issue