Fix Forgejo SSH user configuration
- Set explicit git user for Forgejo service - Add SSH_USER configuration for proper SSH handling - Ensure compatibility with system SSH server
This commit is contained in:
parent
1fd6de2551
commit
f2c9eed794
4 changed files with 64 additions and 55 deletions
|
@ -2,7 +2,7 @@
|
||||||
{
|
{
|
||||||
services.forgejo = {
|
services.forgejo = {
|
||||||
enable = true;
|
enable = true;
|
||||||
# Use the default 'forgejo' user, not 'git'
|
user = "git"; # Explicitly set to 'git' user for SSH compatibility
|
||||||
};
|
};
|
||||||
|
|
||||||
services.forgejo.settings = {
|
services.forgejo.settings = {
|
||||||
|
@ -16,9 +16,11 @@
|
||||||
ROOT_URL = "https://git.geokkjer.eu";
|
ROOT_URL = "https://git.geokkjer.eu";
|
||||||
SSH_DOMAIN = "git.geokkjer.eu";
|
SSH_DOMAIN = "git.geokkjer.eu";
|
||||||
SSH_PORT = 1337;
|
SSH_PORT = 1337;
|
||||||
# Disable built-in SSH server, use system SSH instead
|
# Use system SSH server instead of built-in
|
||||||
DISABLE_SSH = false;
|
DISABLE_SSH = false;
|
||||||
START_SSH_SERVER = false;
|
START_SSH_SERVER = false;
|
||||||
|
# Configure SSH user
|
||||||
|
SSH_USER = "git";
|
||||||
};
|
};
|
||||||
repository = {
|
repository = {
|
||||||
ENABLE_PUSH_CREATE_USER = true;
|
ENABLE_PUSH_CREATE_USER = true;
|
||||||
|
|
|
@ -1,54 +1,59 @@
|
||||||
{ config, pkgs, ... }:
|
|
||||||
{
|
{
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
# Base system packages and aliases shared across all machines
|
# Base system packages and aliases shared across all machines
|
||||||
# This module consolidates common CLI tools to reduce duplication
|
# This module consolidates common CLI tools to reduce duplication
|
||||||
# across user configurations and machine-specific configs
|
# across user configurations and machine-specific configs
|
||||||
|
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
# Modern CLI tools (rust-based replacements)
|
# Modern CLI tools (rust-based replacements)
|
||||||
tldr # Better man pages
|
tldr # Better man pages
|
||||||
eza # Better ls
|
eza # Better ls
|
||||||
bat # Better cat
|
bat # Better cat
|
||||||
ripgrep # Better grep
|
ripgrep # Better grep
|
||||||
du-dust # Better du
|
du-dust # Better du
|
||||||
bottom # Better top
|
bottom # Better top
|
||||||
fd # Better find
|
fd # Better find
|
||||||
fzf # Fuzzy finder
|
fzf # Fuzzy finder
|
||||||
zoxide # Better cd
|
zoxide # Better cd
|
||||||
uutils-coreutils-noprefix # Modern coreutils
|
uutils-coreutils-noprefix # Modern coreutils
|
||||||
|
|
||||||
# Environment management
|
# Environment management
|
||||||
direnv # Directory-based environment management
|
direnv # Directory-based environment management
|
||||||
nix-direnv # Nix integration for direnv
|
nix-direnv # Nix integration for direnv
|
||||||
|
|
||||||
# Essential system tools
|
# Essential system tools
|
||||||
curl # HTTP client
|
curl # HTTP client
|
||||||
wget # Download utility
|
wget # Download utility
|
||||||
git # Version control
|
git # Version control
|
||||||
htop # Process viewer
|
htop # Process viewer
|
||||||
tree # Directory tree viewer
|
tree # Directory tree viewer
|
||||||
file # File type detection
|
file # File type detection
|
||||||
unzip # Archive extraction
|
unzip # Archive extraction
|
||||||
zip # Archive creation
|
zip # Archive creation
|
||||||
fastfetch
|
fastfetch
|
||||||
zellij
|
zellij
|
||||||
glances
|
glances
|
||||||
systemctl-tui
|
systemctl-tui
|
||||||
|
starship # Shell prompt
|
||||||
|
btop # Resource monitor (better top)
|
||||||
|
|
||||||
# Text processing and utilities
|
# Text processing and utilities
|
||||||
jq # JSON processor
|
jq # JSON processor
|
||||||
yq # YAML processor
|
yq # YAML processor
|
||||||
|
|
||||||
# Network utilities
|
# Network utilities
|
||||||
nmap # Network mapper
|
nmap # Network mapper
|
||||||
|
|
||||||
# System monitoring and diagnostics
|
# System monitoring and diagnostics
|
||||||
lsof # List open files
|
lsof # List open files
|
||||||
strace # System call tracer
|
strace # System call tracer
|
||||||
ncdu # Disk usage analyzer
|
ncdu # Disk usage analyzer
|
||||||
|
|
||||||
# Development basics
|
# Development basics
|
||||||
github-cli # GitHub CLI
|
github-cli # GitHub CLI
|
||||||
];
|
];
|
||||||
environment.shellAliases = {
|
environment.shellAliases = {
|
||||||
vi = "nvim";
|
vi = "nvim";
|
||||||
|
|
0
modules/common/emacs.nix
Normal file
0
modules/common/emacs.nix
Normal file
|
@ -1,8 +1,10 @@
|
||||||
# Common User Configuration
|
# Common User Configuration
|
||||||
# Shared settings for all users in the home lab
|
# Shared settings for all users in the home lab
|
||||||
{ config, pkgs, ... }:
|
|
||||||
|
|
||||||
{
|
{
|
||||||
|
config,
|
||||||
|
pkgs,
|
||||||
|
...
|
||||||
|
}: {
|
||||||
# Common user settings
|
# Common user settings
|
||||||
users = {
|
users = {
|
||||||
# Use mutable users for flexibility
|
# Use mutable users for flexibility
|
||||||
|
@ -20,6 +22,7 @@
|
||||||
|
|
||||||
# direnv integration
|
# direnv integration
|
||||||
interactiveShellInit = ''
|
interactiveShellInit = ''
|
||||||
|
eval "$(starship init zsh)"
|
||||||
eval "$(direnv hook zsh)"
|
eval "$(direnv hook zsh)"
|
||||||
'';
|
'';
|
||||||
|
|
||||||
|
@ -81,12 +84,11 @@
|
||||||
enable = true;
|
enable = true;
|
||||||
settings = {
|
settings = {
|
||||||
PasswordAuthentication = false; # Key-based auth only
|
PasswordAuthentication = false; # Key-based auth only
|
||||||
PermitRootLogin = "no"; # No root login
|
PermitRootLogin = "no"; # No root login
|
||||||
X11Forwarding = true; # For GUI applications over SSH
|
X11Forwarding = true; # For GUI applications over SSH
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
||||||
# Enable sound
|
# Enable sound
|
||||||
pipewire = {
|
pipewire = {
|
||||||
enable = true;
|
enable = true;
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue