nixos

commit 027f42711158f15dc692fe066f852b55542dc9a7
parent c9f48178cd3ef4c233cd93e4dc3e6afc23be8c12
Author: MTRNord <mtrnord1@gmail.com>
Date:   Thu, 10 Aug 2023 23:13:28 +0200

Fix perms for token

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
6
+++++-

1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -256,7 +256,6 @@
   };
 
   sops.secrets.backup_password = { };
-  sops.secrets.forgejo_runner_token = { };
 
   # forgejo
   virtualisation.podman.enable = true;
@@ -273,6 +272,11 @@
     };
   };
 
+   systemd.services.gitea-runner-nordgedanken = {
+    serviceConfig.SupplementaryGroups = [ config.users.groups.keys.name ];
+  };
+  sops.secrets.forgejo_runner_token.owner = config.users.gitea-runner.name;
+
 
   # Configure your system-wide user settings (groups, etc), add more users as needed.
   users = {