plumjam/nixos - Change WIFZHHGZ76CFUEN5P6ZWUO763MFOEGGWG5GUM73OIXRTU46K2VFAC

forgejo: Fix forgejo-setup-keys service.

Hopefully this will avoid needing to restart Forgejo after rebuilds.

Created by PlumJam on January 29, 2026

WIFZHHGZ76CFUEN5P6ZWUO763MFOEGGWG5GUM73OIXRTU46K2VFAC

Dependencies

In channels

main

Change contents

Replacement in modules/forgejo.nix at line 18 [4.19750]

B:BD[3.479] → [2.3036:3309]

      # Create symlinks for Forgejo signing keys with correct SSH naming convention.
      systemd.services.forgejo-setup-keys = {
        description = "Setup Forgejo signing key symlinks";
        wantedBy = [ "forgejo.service" ];
        before = [ "forgejo.service" ];

[3.479]

[2.3309]

      system.activationScripts.forgejo-setup-keys = lib.stringAfter [ "agenix" ] ''
        ln --symbolic --force ${config.age.secrets.forgejoSigningKey.path} /run/agenix/forgejo-signing-key
        ln --symbolic --force ${config.age.secrets.forgejoSigningKeyPub.path} /run/agenix/forgejo-signing-key.pub
      '';

Deletion in modules/forgejo.nix at line 23 [4.19750]

B:BD[2.3310] → [2.3310:3639]

        script = ''
          ln -sf ${config.age.secrets.forgejoSigningKey.path} /run/agenix/forgejo-signing-key
          ln -sf ${config.age.secrets.forgejoSigningKeyPub.path} /run/agenix/forgejo-signing-key.pub
        '';
        serviceConfig = {
          Type = "oneshot";
          User = "root";
        };
      };