Hopefully this will avoid needing to restart Forgejo after rebuilds.
WIFZHHGZ76CFUEN5P6ZWUO763MFOEGGWG5GUM73OIXRTU46K2VFAC # Create symlinks for Forgejo signing keys with correct SSH naming convention.systemd.services.forgejo-setup-keys = {description = "Setup Forgejo signing key symlinks";wantedBy = [ "forgejo.service" ];before = [ "forgejo.service" ];
system.activationScripts.forgejo-setup-keys = lib.stringAfter [ "agenix" ] ''ln --symbolic --force ${config.age.secrets.forgejoSigningKey.path} /run/agenix/forgejo-signing-keyln --symbolic --force ${config.age.secrets.forgejoSigningKeyPub.path} /run/agenix/forgejo-signing-key.pub'';