From 14c4440dd1fa31f0589ed6c3a8f91cfa6fab2f20 Mon Sep 17 00:00:00 2001
From: William <baduhai@proton.me>
Date: Sun, 9 Nov 2025 10:34:57 -0300
Subject: [PATCH] forgejo: disable singup; document root password

---
 hosts/trantor/forgejo.nix         |   1 +
 secrets/forgejo-root-password.age | Bin 0 -> 465 bytes
 secrets/secrets.nix               |   5 +++++
 3 files changed, 6 insertions(+)
 create mode 100644 secrets/forgejo-root-password.age

diff --git a/hosts/trantor/forgejo.nix b/hosts/trantor/forgejo.nix
index c11573e..a89526d 100644
--- a/hosts/trantor/forgejo.nix
+++ b/hosts/trantor/forgejo.nix
@@ -24,6 +24,7 @@ in
       log.LEVEL = "Warn";
       mailer.ENABLED = false;
       actions.ENABLED = false;
+      service.DISABLE_REGISTRATION = true;
     };
   };
 
diff --git a/secrets/forgejo-root-password.age b/secrets/forgejo-root-password.age
new file mode 100644
index 0000000000000000000000000000000000000000..90be612af57adcc9b8db836f5f02ed55ff0377b3
GIT binary patch
literal 465
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCUlPD{zlPge*@GRiN@
zHVXH)D2u9$DhM{M@-y(LEGW&3(66X4_6rKl3(GSP49cuB_T(z{3yw514D|_h%SlNs
ztnlzRGPg7fb#pc;&#KTb&aTSNkF+R{NHj0fH$k_}A~M)9vs|Gf%AnB8#VIu0(=EKn
zqd;5R$EncB)6_WIH7YgS$uuv|JkKPoB0xVl!-6X{#XrN(AS=QnDX*%+G$hC@E6*`M
zG^jYpJU3t4Ei=p2FW0!ZJkLGQ&jQ`Hz!Kv?ZAXQaLU)6RLf5nsSAYG)l3YhW-w59b
z<HFSBiik2#zs&UXM1SMLqT-wiqkOK&g20^0#1y|O^Zc~({2bR5{oDvYv!ZgJ@M3?%
zq>zyEz)TZU*ATZz{c<i{U0sD#pY*8wDqk<lOpnwOZ5JQyf-DzHOCv|KkSJ|`kZ4g^
zW`I*wM7Ey=mtf|)#^QPBemxOCRq?{0_R8G3@2n4K?8rJI+`Ibr?ws_D`FRmJMlTE)
el(#6l)^7O~Rjs}<Whr0X(=VK-XCD1l9s>Zdy`tCv

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 84b14d6..a90cd74 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -27,4 +27,9 @@ in
     rotterdam-user
     alexandria
   ];
+  "forgejo-root-password.age".publicKeys = [
+    io-user
+    rotterdam-user
+    trantor
+  ];
 }