ltadeu6/Nixos-Config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add Forgejo API token secret wiring

Browse source
This commit is contained in:
ltadeu6 2026-05-25 15:34:11 -03:00
parent 2827eb869d
commit 601e410ecf
No known key found for this signature in database
GPG key ID: FB9FDAB6B6F3418D
3 changed files with 20 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
AGENTS.md
View file

@ -553,6 +553,7 @@ Estado atual:
- `secrets/openai_api_key.age` - `secrets/openai_api_key.age`
- `secrets/openclaw_gateway_token.age` - `secrets/openclaw_gateway_token.age`
- `secrets/forgejo_api_token.age`
- `secrets/minecraft_rcon_password.age` - `secrets/minecraft_rcon_password.age`
- `secrets/wireguard_private_key.age` - `secrets/wireguard_private_key.age`
@ -567,7 +568,8 @@ Estado atual:
- `fish.shellInit` exporta: - `fish.shellInit` exporta:
- `OPENAI_API_KEY` - `OPENAI_API_KEY`
- `OPENCLAW_GATEWAY_TOKEN` - `OPENCLAW_GATEWAY_TOKEN`
- `/etc/profile.d/openai.sh` e `/etc/profile.d/openclaw.sh` fazem o mesmo para shells de login. - `FORGEJO_API_TOKEN`
- `/etc/profile.d/openai.sh`, `/etc/profile.d/openclaw.sh` e `/etc/profile.d/forgejo.sh` fazem o mesmo para shells de login.
- O token do Home Assistant do Waybar AC NAO esta sob agenix neste repo; ele e lido diretamente de `~/.config/secrets/ha_token`. - O token do Home Assistant do Waybar AC NAO esta sob agenix neste repo; ele e lido diretamente de `~/.config/secrets/ha_token`.
## Dependencias implicitas e pontos de atencao ## Dependencias implicitas e pontos de atencao

16
hosts/Nixos/configuration.nix
View file

@ -173,6 +173,14 @@ in {
mode = "0400"; mode = "0400";
}; };
} // lib.optionalAttrs } // lib.optionalAttrs
(builtins.pathExists ../../secrets/forgejo_api_token.age) {
forgejo_api_token = {
file = ../../secrets/forgejo_api_token.age;
owner = username;
group = "users";
mode = "0400";
};
} // lib.optionalAttrs
(builtins.pathExists ../../secrets/minecraft_rcon_password.age) { (builtins.pathExists ../../secrets/minecraft_rcon_password.age) {
minecraft_rcon_password.file = minecraft_rcon_password.file =
../../secrets/minecraft_rcon_password.age; ../../secrets/minecraft_rcon_password.age;
@ -292,6 +300,9 @@ in {
if test -r /run/agenix/openclaw_gateway_token if test -r /run/agenix/openclaw_gateway_token
set -gx OPENCLAW_GATEWAY_TOKEN (cat /run/agenix/openclaw_gateway_token) set -gx OPENCLAW_GATEWAY_TOKEN (cat /run/agenix/openclaw_gateway_token)
end end
if test -r /run/agenix/forgejo_api_token
set -gx FORGEJO_API_TOKEN (cat /run/agenix/forgejo_api_token)
end
''; '';
shellAliases = { shellAliases = {
la = "exa --icons --git"; la = "exa --icons --git";
@ -1154,6 +1165,11 @@ in {
export OPENCLAW_GATEWAY_TOKEN="$(cat /run/agenix/openclaw_gateway_token)" export OPENCLAW_GATEWAY_TOKEN="$(cat /run/agenix/openclaw_gateway_token)"
fi fi
''; '';
environment.etc."profile.d/forgejo.sh".text = ''
if [ -r /run/agenix/forgejo_api_token ]; then
export FORGEJO_API_TOKEN="$(cat /run/agenix/forgejo_api_token)"
fi
'';
users.groups.libvirtd.members = [ username ]; users.groups.libvirtd.members = [ username ];

1
secrets/secrets.nix
View file

@ -9,6 +9,7 @@ let
in { in {
"secrets/openai_api_key.age".publicKeys = [ users.ltadeu6 systems.Nixos ]; "secrets/openai_api_key.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
"secrets/openclaw_gateway_token.age".publicKeys = [ users.ltadeu6 systems.Nixos ]; "secrets/openclaw_gateway_token.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
"secrets/forgejo_api_token.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
"secrets/minecraft_rcon_password.age".publicKeys = [ users.ltadeu6 systems.Nixos ]; "secrets/minecraft_rcon_password.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
"secrets/wireguard_private_key.age".publicKeys = [ users.ltadeu6 systems.Nixos ]; "secrets/wireguard_private_key.age".publicKeys = [ users.ltadeu6 systems.Nixos ];