diff --git a/nix-system-configs/modules/system/forgejo.nix b/nix-system-configs/modules/system/forgejo.nix index 9f95bd0..f000f9f 100644 --- a/nix-system-configs/modules/system/forgejo.nix +++ b/nix-system-configs/modules/system/forgejo.nix @@ -32,9 +32,6 @@ in { }; imports = [ - # ./secrets/secrets.nix # Add this locally after running add-secrets.zsh - # Optionally import local secrets if present (won't fail if missing) - (lib.optional (builtins.pathExists ./secrets/secrets.nix) ./secrets/secrets.nix) ./modules/desktop-manager/sway_greetd_homemanager.nix ./modules/local/hostname_username.nix ./modules/local/networking_local.nix @@ -70,6 +67,7 @@ in { services.forgejo = { enable = true; database = { + createDatabase = false; # Database already created, DO NOT REMOVE THIS OR IT WILL DEFAULT INTO INTERNAL ONE type = "postgres"; host = "10.1.1.251"; # IP of your database server name = "forgejo"; diff --git a/nix-system-configs/modules/toolsets/remote_building.nix b/nix-system-configs/modules/toolsets/remote_building.nix index 8670a37..820e202 100644 --- a/nix-system-configs/modules/toolsets/remote_building.nix +++ b/nix-system-configs/modules/toolsets/remote_building.nix @@ -39,7 +39,8 @@ HostName 10.1.1.3 IdentitiesOnly yes IdentityFile /root/.ssh/nixremote - User nixremoteStrictHostKeyChecking accept-new + User nixremote + StrictHostKeyChecking accept-new ''; # Manual step required: After rebuilding the client, copy /root/.ssh/nixremote.pub diff --git a/nix-system-configs/secrets/songsheet/secrets.yaml b/nix-system-configs/secrets/songsheet/secrets.yaml index feef841..7755b12 100644 --- a/nix-system-configs/secrets/songsheet/secrets.yaml +++ b/nix-system-configs/secrets/songsheet/secrets.yaml @@ -1,6 +1,6 @@ songsheet: database: - DATABASE_URL: ENC[AES256_GCM,data:eKJ1u+2n59lpvue1Orysn9QEvfICSLncR1txXW3Smp9LhrADMOaEROCP/Cd+qH2p3635XSFhoPpN7E2L6l5GZSk1eNyPYdi41zycJUBzvy5rVMnBjYoBd8e+QFxrgDjZ2U7NunCwejqm5i0/5AwQ/0joJsGVwUiNcoYO,iv:ch4BF6C0qYvkCruysqBTwjZ+9mVx2AORJ2TzGM4BTqw=,tag:HqEmcIEq/Q60CSlwef6vLA==,type:str] + DATABASE_URL: ENC[AES256_GCM,data:BTt1zpru/wBW0Vb4/My2NiX98cD2Gd8CsdivbtKf/3CJdjNaLzA0VS8ecAGvU9YvYlQri42pzDNxfeMuVF+nWRTtjdvPMFyZV9P7VeZ+05Rz3M1mKvWr37yTzTzi1bpjT+d6FttGIKEAym5VdM53CkSZPLV0S9e8/8Awa0TZ7MTX3Adt8amh,iv:jL7PyOC80zCPAZNdPLip2ngcqAIORM9QxzqKgu0roTM=,tag:JsFr+cJl6z2TTSpVAAyf2Q==,type:str] sops: age: - recipient: age1746rvsvsc3snxfl7cndm222wd5kck4aqj3x7nednlegq0gdjhfcqx0qv7m @@ -21,7 +21,7 @@ sops: V1F4TVEwaGgvUHcySnVQcXBHNzFuTU0KVNh7si39NVWZH9O52L9+gh1evvjotqK9 Zjmb97QR1C2LzEqOrfPuj6Lr86SS4RYSzSq2Oknn9o9SIs/5thR0YQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-02-07T17:44:51Z" - mac: ENC[AES256_GCM,data:lCQNNBpkCkzdTX+08eY4sMNFQbXSiNvBqBPro2U+OSaPvxjJRlG79K++mAnkCtFiIElSTACxOe8dTRz9frckVJQc5fL3o4PlDjeX3mzHj8V2F4DwEnQtJleLe63smtMb9ZJD3I0ivlfdcqV6GAIBtg65lQIEjgZ8tLvHSrsSpzs=,iv:PntgUV77KXsc6RLyLUBG0761GSQd/NjMA8XLyx4OBow=,tag:mI3B4aIsSTOQCOgKC6GCCg==,type:str] + lastmodified: "2026-02-09T19:51:51Z" + mac: ENC[AES256_GCM,data:2bro0enEMVx/znh8BPZdXrHAebq5Rej+xN+nSK9lthSNXztw0SXVsblhE7Zr+lcmNpJh7yOoa/buAZrcClM5HljcDL5pwLcHmKPhV/00TH2Pv5QiJww15MlxplwqW6LFmtEzInIF+fMENMU1v6v/1PrNaYYT68boMHEBlxFOXlo=,iv:0aa0G3KX3Gjzxz+rncbCJoENxW5nrlbg/opYGrC8sOc=,tag:4u81P/b5Fs4KQGHMGNZQ5A==,type:str] unencrypted_suffix: _unencrypted version: 3.11.0