forgejoSigningKey = {
                rekeyFile = ../secrets/plum-forgejo-signing-key.age;
                owner = "forgejo";
              };
              forgejoSigningKeyPub = {
                rekeyFile = ../secrets/plum-forgejo-signing-key-pub.age;
                owner = "forgejo";
              };

      # Create symlinks for Forgejo signing keys with correct SSH naming convention.
      systemd.services.forgejo-setup-keys = {
        description = "Setup Forgejo signing key symlinks";
        wantedBy = [ "forgejo.service" ];
        before = [ "forgejo.service" ];
        script = ''
          ln -sf ${config.age.secrets.forgejoSigningKey.path} /run/agenix/forgejo-signing-key
          ln -sf ${config.age.secrets.forgejoSigningKeyPub.path} /run/agenix/forgejo-signing-key.pub
        '';
        serviceConfig = {
          Type = "oneshot";
          User = "root";
        };
      };

            admin.DISABLE_REGULAR_ORG_CREATION = true;

              DEFAULT_CLOSE_ISSUES_VIA_COMMITS_IN_ANY_BRANCH = true;

            "repository.signing" = {
              FORMAT = "ssh";
              SIGNING_KEY = "/run/agenix/forgejo-signing-key.pub";
              MERGES = "always";
            };