4c560abffd
- Extract forgejo-runner config from forgejo.nix into forgejo-runner.nix - Move forgejo-runner to stage 2 (requires running Forgejo for token) - Remove all stage-2 secrets from sops.nix (each service file owns its secrets) - Update first-install docs with corrected staged deployment flow - Fixes deployment failure caused by runner crashing with placeholder token
21 lines
422 B
Nix
21 lines
422 B
Nix
{
|
|
config,
|
|
pkgs,
|
|
outputs,
|
|
...
|
|
}:
|
|
|
|
{
|
|
imports = [
|
|
outputs.nixosModules.sops
|
|
];
|
|
|
|
sops = {
|
|
defaultSopsFile = ../secrets.yaml;
|
|
# age.keyFile is not set, sops-nix defaults to using /etc/ssh/ssh_host_ed25519_key
|
|
|
|
# Secrets fuer Stufe-2-Services werden in deren eigenen Dateien definiert:
|
|
# forgejo-runner/token -> forgejo-runner.nix
|
|
# tailscale/auth-key -> tailscale.nix (via Modul)
|
|
};
|
|
}
|