nixos

commit 096687699177fdf557f2f8602d443d04c274c0c3
parent 834564717d077d3bb3bbe85e47830138a57282e7
Author: MTRNord <mtrnord1@gmail.com>
Date:   Thu, 10 Aug 2023 23:16:02 +0200

Fix perms for token

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
40
++++++++++++++++++++--------------------

1 file changed, 20 insertions(+), 20 deletions(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -257,26 +257,6 @@
 
   sops.secrets.backup_password = { };
 
-  # forgejo
-  virtualisation.podman.enable = true;
-
-  services.gitea-actions-runner = {
-    instances = {
-      nordgedanken = {
-        enable = true;
-        url = "https://git.nordgedanken.dev";
-        tokenFile = config.sops.secrets.forgejo_runner_token.path;
-        labels = [ ];
-        name = "worker-1";
-      };
-    };
-  };
-
-   systemd.services.gitea-runner-nordgedanken = {
-    serviceConfig.SupplementaryGroups = [ config.users.groups.keys.name ];
-  };
-  sops.secrets.forgejo_runner_token.owner = "gitea-runner";
-
 
   # Configure your system-wide user settings (groups, etc), add more users as needed.
   users = {
@@ -295,6 +275,26 @@
     };
   };
 
+  # forgejo
+  virtualisation.podman.enable = true;
+
+  services.gitea-actions-runner = {
+    instances = {
+      nordgedanken = {
+        enable = true;
+        url = "https://git.nordgedanken.dev";
+        tokenFile = config.sops.secrets.forgejo_runner_token.path;
+        labels = [ ];
+        name = "worker-1";
+      };
+    };
+  };
+
+  systemd.services.gitea-runner-nordgedanken = {
+    serviceConfig.SupplementaryGroups = [ config.users.groups.keys.name ];
+  };
+  sops.secrets.forgejo_runner_token.owner = config.users."gitea-runner".name;
+
   users.users."root".passwordFile = config.sops.secrets.root_initial_password.path;
 
   # Restic Backup