The gitea-actions-runner NixOS module expects tokenFile to be an EnvironmentFile containing TOKEN=<value>, but sops-nix writes only the raw secret value. Use a sops template to prepend TOKEN= prefix.
17 lines
493 B
Nix
17 lines
493 B
Nix
{
|
|
imports = [
|
|
# Stufe 1: Services ohne externe Abhaengigkeiten
|
|
./forgejo.nix
|
|
./headscale.nix
|
|
./mailserver.nix
|
|
./netdata.nix
|
|
./nginx.nix
|
|
./openssh.nix
|
|
./sops.nix
|
|
|
|
# Stufe 2: Erst aktivieren wenn Headscale/Forgejo laufen und echte Secrets existieren
|
|
./forgejo-runner.nix # braucht: forgejo-runner/token (Forgejo)
|
|
./headplane.nix # braucht: headplane/agent_pre_authkey (Headscale)
|
|
./tailscale.nix # braucht: tailscale/auth-key (Headscale)
|
|
];
|
|
}
|