pub-solar/infra
6
1
Fork 3
Code Issues 20 Pull requests 9 Actions Packages Projects 1 Releases Wiki Activity

forgejo: allow webhooks to all pub.solar subdomains #80

Merged
teutat3s merged 2 commits from fix/forgejo-matrix-webhook into main 2023-12-13 01:11:48 +00:00
Conversation 0 Commits 2 Files changed 1 +18 -4
1 changed files with 18 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
hosts/nachtigall/apps/forgejo.nix
View file

@ -51,7 +51,9 @@
HTTP_ADDR = "127.0.0.1"; HTTP_ADDR = "127.0.0.1";
HTTP_PORT = 3000; HTTP_PORT = 3000;
}; };
log.LEVEL = "Warn"; log.LEVEL = "Warn";
mailer = { mailer = {
ENABLED = true; ENABLED = true;
PROTOCOL = "smtps"; PROTOCOL = "smtps";
@ -60,14 +62,17 @@
FROM = ''"pub.solar git server" <forgejo@pub.solar>''; FROM = ''"pub.solar git server" <forgejo@pub.solar>'';
USER = "admins@pub.solar"; USER = "admins@pub.solar";
}; };
"repository.signing" = { "repository.signing" = {
SIGNING_KEY = "default"; SIGNING_KEY = "default";
MERGES = "always"; MERGES = "always";
}; };
openid = { openid = {
ENABLE_OPENID_SIGNIN = true; ENABLE_OPENID_SIGNIN = true;
ENABLE_OPENID_SIGNUP = true; ENABLE_OPENID_SIGNUP = true;
}; };
service = { service = {
# uncomment after initial deployment, first user is admin user # uncomment after initial deployment, first user is admin user
# required to setup SSO (oauth openid-connect, keycloak auth provider) # required to setup SSO (oauth openid-connect, keycloak auth provider)
@ -75,15 +80,24 @@
ENABLE_NOTIFY_MAIL = true; ENABLE_NOTIFY_MAIL = true;
DEFAULT_KEEP_EMAIL_PRIVATE = true; DEFAULT_KEEP_EMAIL_PRIVATE = true;
}; };
session = { session = {
PROVIDER = "db"; PROVIDER = "db";
COOKIE_SECURE = lib.mkForce true; COOKIE_SECURE = lib.mkForce true;
}; };
# https://forgejo.org/docs/latest/admin/config-cheat-sheet/#webhook-webhook
webhook = {
ALLOWED_HOST_LIST = "loopback,external,*.pub.solar";
};
# See https://forgejo.org/docs/latest/admin/actions/ # See https://forgejo.org/docs/latest/admin/actions/
actions.ENABLED = true; actions = {
ENABLED = true;
# In an actions workflow, when uses: does not specify an absolute URL, # In an actions workflow, when uses: does not specify an absolute URL,
# the value of DEFAULT_ACTIONS_URL is prepended to it. # the value of DEFAULT_ACTIONS_URL is prepended to it.
actions.DEFAULT_ACTIONS_URL = "https://code.forgejo.org"; DEFAULT_ACTIONS_URL = "https://code.forgejo.org";
};
}; };
}; };