Add Forgejo API token secret wiring

AGENTS.md

@@ -553,6 +553,7 @@ Estado atual:
 
 - `secrets/openai_api_key.age`
 - `secrets/openclaw_gateway_token.age`
+- `secrets/forgejo_api_token.age`
 - `secrets/minecraft_rcon_password.age`
 - `secrets/wireguard_private_key.age`
 
@@ -567,7 +568,8 @@ Estado atual:
 - `fish.shellInit` exporta:
   - `OPENAI_API_KEY`
   - `OPENCLAW_GATEWAY_TOKEN`
-- `/etc/profile.d/openai.sh` e `/etc/profile.d/openclaw.sh` fazem o mesmo para shells de login.
+  - `FORGEJO_API_TOKEN`
+- `/etc/profile.d/openai.sh`, `/etc/profile.d/openclaw.sh` e `/etc/profile.d/forgejo.sh` fazem o mesmo para shells de login.
 - O token do Home Assistant do Waybar AC NAO esta sob agenix neste repo; ele e lido diretamente de `~/.config/secrets/ha_token`.
 
 ## Dependencias implicitas e pontos de atencao

hosts/Nixos/configuration.nix

@@ -173,6 +173,14 @@ in {
           mode = "0400";
         };
       } // lib.optionalAttrs
+      (builtins.pathExists ../../secrets/forgejo_api_token.age) {
+        forgejo_api_token = {
+          file = ../../secrets/forgejo_api_token.age;
+          owner = username;
+          group = "users";
+          mode = "0400";
+        };
+      } // lib.optionalAttrs
       (builtins.pathExists ../../secrets/minecraft_rcon_password.age) {
         minecraft_rcon_password.file =
           ../../secrets/minecraft_rcon_password.age;
@@ -292,6 +300,9 @@ in {
         if test -r /run/agenix/openclaw_gateway_token
           set -gx OPENCLAW_GATEWAY_TOKEN (cat /run/agenix/openclaw_gateway_token)
         end
+        if test -r /run/agenix/forgejo_api_token
+          set -gx FORGEJO_API_TOKEN (cat /run/agenix/forgejo_api_token)
+        end
       '';
       shellAliases = {
         la = "exa --icons --git";
@@ -1154,6 +1165,11 @@ in {
       export OPENCLAW_GATEWAY_TOKEN="$(cat /run/agenix/openclaw_gateway_token)"
     fi
   '';
+  environment.etc."profile.d/forgejo.sh".text = ''
+    if [ -r /run/agenix/forgejo_api_token ]; then
+      export FORGEJO_API_TOKEN="$(cat /run/agenix/forgejo_api_token)"
+    fi
+  '';
 
   users.groups.libvirtd.members = [ username ];
 

secrets/secrets.nix

@@ -9,6 +9,7 @@ let
 in {
   "secrets/openai_api_key.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
   "secrets/openclaw_gateway_token.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
+  "secrets/forgejo_api_token.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
   "secrets/minecraft_rcon_password.age".publicKeys = [ users.ltadeu6 systems.Nixos ];
   "secrets/wireguard_private_key.age".publicKeys = [ users.ltadeu6 systems.Nixos ];