baduhai/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fix forgejo on trantor

Browse source
This commit is contained in:
William 2026-02-16 00:07:36 -03:00
parent fe460c9151
commit 657e1e4697
2 changed files with 6 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
aspects/hosts/_trantor/forgejo.nix
View file

@ -21,6 +21,8 @@ in
ROOT_URL = "https://git.baduhai.dev"; ROOT_URL = "https://git.baduhai.dev";
OFFLINE_MODE = true; # disable use of CDNs OFFLINE_MODE = true; # disable use of CDNs
SSH_DOMAIN = "git.baduhai.dev"; SSH_DOMAIN = "git.baduhai.dev";
SSH_USER = "forgejo";
SSH_PORT = lib.head config.services.openssh.ports;
}; };
log.LEVEL = "Warn"; log.LEVEL = "Warn";
mailer.ENABLED = false; mailer.ENABLED = false;
@ -67,5 +69,8 @@ in
}; };
# Disable PrivateMounts to allow LoadCredential to work with bind-mounted directories # Disable PrivateMounts to allow LoadCredential to work with bind-mounted directories
systemd.services.forgejo.serviceConfig.PrivateMounts = lib.mkForce false; systemd.services.forgejo.serviceConfig = {
PrivateMounts = lib.mkForce false;
ProtectSystem = lib.mkForce false;
};
} }

2
aspects/hosts/_trantor/nginx.nix
View file

@ -8,10 +8,8 @@
let let
services = inputs.self.services; services = inputs.self.services;
# Get all unique domains from shared services on trantor (host = "trantor")
localDomains = lib.unique (map (s: s.domain) (lib.filter (s: s.host == "trantor") services)); localDomains = lib.unique (map (s: s.domain) (lib.filter (s: s.host == "trantor") services));
# Generate ACME cert configs for all local domains
acmeCerts = lib.genAttrs localDomains (domain: { acmeCerts = lib.genAttrs localDomains (domain: {
group = "nginx"; group = "nginx";
}); });