Compare commits

..

No commits in common. "866f8b1b908576676ab07f13ae12790176e19df6" and "13ab4ae245a6e160172e0c19173a97bfa1f158eb" have entirely different histories.

2 changed files with 7 additions and 14 deletions

View file

@ -2,10 +2,10 @@
let let
svc_domain = "git.${config.mine.shared.settings.domain}"; svc_domain = "git.${config.mine.shared.settings.domain}";
in { in {
services.forgejo = { services.forgejo = {
enable = true; enable = true;
stateDir = config.mine.zfsMounts."rpool/safe/svcs/forgejo";
package = pkgs.forgejo.overrideAttrs (old: { package = pkgs.forgejo.overrideAttrs (old: {
patches = old.patches ++ [ patches = old.patches ++ [
@ -14,9 +14,7 @@ in {
]; ];
}); });
# use postgres, will create and start postgresql stateDir = config.mine.zfsMounts."rpool/safe/svcs/forgejo";
# itself, as well as databdase and user
database.type = "postgres";
settings = { settings = {
server = { server = {

View file

@ -152,11 +152,6 @@ in {
# secrets # secrets
secretFile = config.age.secrets.nextcloud-secrets.path; secretFile = config.age.secrets.nextcloud-secrets.path;
# use postgresql for database
# createLocally will enable postgresql, add database and user
database.createLocally = true;
config.dbtype = "pgsql";
# settings # settings
settings = { settings = {
# open connect/oidc # open connect/oidc
@ -198,6 +193,11 @@ in {
serviceConfig.RemainAfterExit = true; serviceConfig.RemainAfterExit = true;
}; };
# ensure that nextcloud can access stateDir
systemd.tmpfiles.rules = [
"Z ${stateDir} 6770 ${nextcloud_user} ${nextcloud_group} -"
];
# setup authelia for nextcloud # setup authelia for nextcloud
services.authelia.instances.main.settings.identity_providers.oidc.clients = [{ services.authelia.instances.main.settings.identity_providers.oidc.clients = [{
client_id = AUTHELIA_AUTH_NAME; client_id = AUTHELIA_AUTH_NAME;
@ -217,11 +217,6 @@ in {
enableACME = true; enableACME = true;
}; };
# ensure that nextcloud can access stateDir
systemd.tmpfiles.rules = [
"Z ${stateDir} 6770 ${nextcloud_user} ${nextcloud_group} -"
];
age.secrets = { age.secrets = {
nextcloud-admin-pass.owner = nextcloud_user; nextcloud-admin-pass.owner = nextcloud_user;
nextcloud-secrets.owner = nextcloud_user; nextcloud-secrets.owner = nextcloud_user;