From 95e12b115b7902b4cfacd7fee66ec0fe27de48b6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felix=20Schr=C3=B6ter?= <dev@felschr.com>
Date: Sun, 19 Jan 2025 13:29:47 +0100
Subject: [PATCH] fix(forgejo): add gitea-runner to Nix allowed & trusted users

---
 services/forgejo/runner.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/services/forgejo/runner.nix b/services/forgejo/runner.nix
index 7c4ed49..0bc43fa 100644
--- a/services/forgejo/runner.nix
+++ b/services/forgejo/runner.nix
@@ -37,6 +37,9 @@ in
     };
   };
 
+  nix.settings.allowed-users = [ "gitea-runner" ];
+  nix.settings.trusted-users = [ "gitea-runner" ];
+
   # automatically get registration token from forgejo
   systemd.services.forgejo.postStart = lib.mkBefore ''
     ${pkgs.bash}/bin/bash -c '(while ! ${pkgs.netcat-openbsd}/bin/nc -z -U ${forgejoCfg.settings.server.HTTP_ADDR}; do echo "Waiting for unix ${forgejoCfg.settings.server.HTTP_ADDR} to open..."; sleep 2; done); sleep 2'