randogoth/bucur
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Point web-repo flake inputs and deploy SSH config at code.randogoth.com instead of Codeberg

Browse source
This commit is contained in:
randogoth 2026-07-23 13:00:36 +02:00
parent 34b91012e5
commit 699bfb01c1
5 changed files with 34 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

8
modules/services/forgejo.nix
View file

@ -32,10 +32,10 @@ in
};
};
# System-wide SSH client config so root (the nix daemon) can fetch the private
# Forgejo flake inputs, mirroring the Codeberg block in webhook-deploy.nix.
# Reuses the existing /etc/ssh/codeberg_id_ed25519 deploy key (its public half
# is registered on the randogoth Forgejo account).
# System-wide SSH client config so root (the nix daemon) can fetch this
# Forgejo's own flake inputs. Reuses the existing /etc/ssh/codeberg_id_ed25519
# deploy key (its public half is registered on the randogoth Forgejo account) —
# the same key all other flake inputs migrated off Codeberg now use too.
programs.ssh.extraConfig = ''
Host ${domain}
Port 2222

8
modules/services/webhook-deploy.nix
View file

@ -58,12 +58,8 @@ in
mode = "0400";
};
# System-wide SSH client config so root can reach Codeberg via the deploy key.
programs.ssh.extraConfig = ''
Host codeberg.org
IdentityFile /etc/ssh/codeberg_id_ed25519
StrictHostKeyChecking accept-new
'';
# All flake inputs pulled here now live on code.randogoth.com; the SSH
# client config for that host (same deploy key) is set up in forgejo.nix.
systemd.services = lib.listToAttrs
(map (site: lib.nameValuePair "update-${site.name}" {