mirror of
https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git
synced 2025-01-19 09:16:46 +01:00
27 lines
650 B
Nix
27 lines
650 B
Nix
|
{ config, pkgs, lib, ... }:
|
||
|
|
let
|
||
|
|
cfg = config.services.gitea;
|
||
|
|
GNUPGHOME = "${config.users.users.gitea.home}/gnupg";
|
||
|
|
in
|
||
|
|
{
|
||
|
|
sops.secrets."gitea/gpg-signing-key" = {
|
||
|
|
owner = cfg.user;
|
||
|
|
inherit (cfg) group;
|
||
|
|
};
|
||
|
|
|
||
|
|
systemd.services.gitea.environment = { inherit GNUPGHOME; };
|
||
|
|
|
||
|
|
systemd.services.gitea-ensure-gnupg-homedir = {
|
||
|
|
description = "Import gpg key for gitea";
|
||
|
|
environment = { inherit GNUPGHOME; };
|
||
|
|
serviceConfig = {
|
||
|
|
Type = "oneshot";
|
||
|
|
User = cfg.user;
|
||
|
|
PrivateNetwork = true;
|
||
|
|
};
|
||
|
|
script = ''
|
||
|
|
${lib.getExe pkgs.gnupg} --import ${config.sops.secrets."gitea/gpg-signing-key".path}
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
}
|