felixalb/pvv-nixos-config
1
0
Fork 0
mirror of https://git.pvv.ntnu.no/Drift/pvv-nixos-config.git synced 2025-11-04 02:58:02 +01:00
Code Issues Projects Releases Wiki Activity

WIP: gitea: init gpg signing key

Browse Source
This commit is contained in:
h7x4 2024-11-23 23:51:53 +01:00
parent 07777edafb
commit 78028846a9
No known key found for this signature in database
GPG Key ID: 9F2F7D8250F35146
2 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/bekkalokk/services/gitea/default.nix
View File

@ -6,6 +6,7 @@ let
in { in {
imports = [ imports = [
./ci.nix ./ci.nix
./gpg.nix
./import-users ./import-users
./web-secret-provider ./web-secret-provider
]; ];

26
hosts/bekkalokk/services/gitea/gpg.nix Normal file
View File

@ -0,0 +1,26 @@
{ config, pkgs, lib, ... }:
let
cfg = config.services.gitea;
GNUPGHOME = "${config.users.users.gitea.home}/gnupg";
in
{
sops.secrets."gitea/gpg-signing-key" = {
owner = cfg.user;
inherit (cfg) group;
};
systemd.services.gitea.environment = { inherit GNUPGHOME; };
systemd.services.gitea-ensure-gnupg-homedir = {
description = "Import gpg key for gitea";
environment = { inherit GNUPGHOME; };
serviceConfig = {
Type = "oneshot";
User = cfg.user;
PrivateNetwork = true;
};
script = ''
${lib.getExe pkgs.gnupg} --import ${config.sops.secrets."gitea/gpg-signing-key".path}
'';
};
}