my over complex system configurations dotfiles.isabelroses.com/
nixos nix flake dotfiles linux
10
fork

Configure Feed

Select the types of activity you want to include in your feed.

nixos/services/forgejo: fix ssh

isabel fee07456 ee4d8243

+8 -16
+1 -1
home/isabel/system/ssh.nix
··· 56 56 }; 57 57 58 58 "git.isabelroses.com" = { 59 - user = "git"; 59 + user = "forgejo"; 60 60 hostname = "git.isabelroses.com"; 61 61 identityFile = secrets.keys-git-isabel.path; 62 62 };
+3 -1
modules/nixos/networking/openssh.nix
··· 29 29 AuthenticationMethods = "publickey"; 30 30 PubkeyAuthentication = "yes"; 31 31 ChallengeResponseAuthentication = "no"; 32 - UsePAM = false; 32 + 33 + # forgejo! 34 + UsePAM = true; 33 35 34 36 UseDns = false; 35 37 X11Forwarding = false;
+1 -11
modules/nixos/services/forgejo.nix
··· 45 45 config.services.forgejo.settings.server.SSH_PORT 46 46 ]; 47 47 48 - users = { 49 - groups.git = { }; 50 - 51 - users.git = { 52 - isSystemUser = true; 53 - createHome = false; 54 - group = "git"; 55 - }; 56 - }; 57 - 58 48 catppuccin.forgejo = { 59 49 enable = true; 60 50 flavor = "mocha"; ··· 79 69 HTTP_PORT = cfg.port; 80 70 DOMAIN = cfg.domain; 81 71 82 - BUILTIN_SSH_SERVER_USER = "git"; 72 + # BUILTIN_SSH_SERVER_USER = "git"; 83 73 DISABLE_ROUTER_LOG = true; 84 74 # LANDING_PAGE = "/explore/repos"; 85 75
+3 -3
secrets/isabel.yaml
··· 5 5 gpg: ENC[AES256_GCM,data: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,iv:pc6roIhV14K4iWucC/92QXBKaLuBzHEw1SFX2nSWIAE=,tag:bkojI1rLeK+4MKsfwInz8w==,type:str] 6 6 keys-nixos: ENC[AES256_GCM,data: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,iv:DNf7i423ajH+WyYJsIypQY5NTvkNeyRCGhdw5c4xmrw=,tag:JV4du5n2WI9Z9WCDbLogSQ==,type:str] 7 7 keys-tangled: ENC[AES256_GCM,data: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,iv:a6+fJLN4eQSXZzV/U0prl8luOgiNC8Y1hYYkHxLpPSQ=,tag:5R4k9igmasjz904omyNZCA==,type:str] 8 - keys-git-isabel: ENC[AES256_GCM,data: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,iv:F8iyHCTbK7Aqyd/6elKA+svZq7ccIC7vG4xSIj/0CFM=,tag:BpMTvd2Br/LXTEvCcamL6A==,type:str] 8 + keys-git-isabel: ENC[AES256_GCM,data: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,iv:jiAPn0KNpnz/DuZaluMo0qrfYkSnNHb2yKwzI46thuw=,tag:WQw8nCQZnBXFvV2rZH8HdA==,type:str] 9 9 nix-auth-tokens: ENC[AES256_GCM,data:b5WVJz8mGrcimQlEQ0C8HiyDp4VFPjL26dCzDENcpg/xocwFw54AjUVbaDarElKBjUlH,iv:m6mYl/OgfuVwRgloCLAFEfFRaBMM9uxKSyyB98gLHx4=,tag:hJtZqVwFj4Hjv0Pi99rxeg==,type:str] 10 10 wakatime: ENC[AES256_GCM,data:l9g8lSXUZjVw49Z987zo9deeSMpu+1hgPZlfvm3oQOdDB/IQ/wOlQ+eJLA/3N12CySU2A9eKd9jnSFLgCpo6QRNq++Z+ZdqL+5raZOocfblTJcXFFaDVgvofO9qKHrCV1PPhQ61FbA==,iv:JKr6u5XXt+QaNQkHPEY3mQc3OQya26u37B4auxH9PjY=,tag:i0h6Ws+rD0rGDxcmWSzfPw==,type:str] 11 11 uni-central: ENC[AES256_GCM,data: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,iv:U8+TDM3gWL0GPhAK5UMbVXO/4DxxWZs6hxIcUqLUiBk=,tag:2lE6WIrNUAtG671WyQRKkQ==,type:str] ··· 25 25 dN3efiSmTqI0Xdygv44F8H8oRZno8bf0ilBzluhI5a77v8tMo7Z5QKTLSpfdJcCd 26 26 jgRqTg== 27 27 -----END AGE ENCRYPTED FILE----- 28 - lastmodified: "2025-12-08T20:42:52Z" 29 - mac: ENC[AES256_GCM,data:MK6u8gzk06vslTv9YGGUvMMK8YKRHWkcW+r4rZZovr9km6vyaM5625rrBXUmlaHl6BZXB6dYg5CEovC2W8NUWonB1jrZxwcBaMsd9iydz69NoAgjS9/jwjX2ElbYlfc7ZyAgQA7rFXE7aDbXCL3a9Tztkhixlf1m+Yq5bCSwrss=,iv:gLxFucFm3byalVoWzs/ntWGU9ht/91s9kskcfd3LAGM=,tag:WrKx+34YxN8Q3loBlHChmQ==,type:str] 28 + lastmodified: "2025-12-13T14:38:28Z" 29 + mac: ENC[AES256_GCM,data:6/CZZj0n4ATHqOBqHnIeXSICaJhyxeNSN3CTI7p79iRN8ONWZZjCLsEWcx5GrGjbEbbXairYshJr/FW/H32LIwSZQlTaPBJNZmDvCG8o2GybQ3Nd4caK6QtKZY+dtG6NsRulrggHFF8oCvQ6h0ZhBMgaZtwfxTB8/q9wRuRURPA=,iv:DqcGMb+y3ZLqfHI27NbFjwUO0fdIGIgrZxPqvFsfAL4=,tag:ob3PiFLSdyZwoCWvMKJ/ZA==,type:str] 30 30 unencrypted_suffix: _unencrypted 31 31 version: 3.11.0