gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/gitea: add support for minio secrets (#415705)

Browse Source
This commit is contained in:
Sandro
2025-06-16 01:28:50 +02:00
committed by GitHub
parent 4d537ee015 40a116fcae
commit 55d6dd76b3
1 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/misc/gitea.nix
+30
View File
@@ -373,6 +373,20 @@ in
description = "Path to a file containing the metrics authentication token.";
};
minioAccessKeyId = mkOption {
type = types.nullOr types.str;
default = null;
example = "/var/lib/secrets/gitea/minio_access_key_id";
description = "Path to a file containing the Minio access key id.";
};
minioSecretAccessKey = mkOption {
type = types.nullOr types.str;
default = null;
example = "/var/lib/secrets/gitea/minio_secret_access_key";
description = "Path to a file containing the Minio secret access key.";
};
settings = mkOption {
default = { };
description = ''
@@ -655,6 +669,15 @@ in
};
packages.CHUNKED_UPLOAD_PATH = "${cfg.stateDir}/tmp/package-upload";
storage = mkMerge [
(mkIf (cfg.minioAccessKeyId != null) {
MINIO_ACCESS_KEY_ID = "#minioaccesskeyid#";
})
(mkIf (cfg.minioSecretAccessKey != null) {
MINIO_SECRET_ACCESS_KEY = "#miniosecretaccesskey#";
})
];
};
services.postgresql = optionalAttrs (usePostgresql && cfg.database.createDatabase) {
@@ -797,6 +820,13 @@ in
${replaceSecretBin} '#metricstoken#' '${cfg.metricsTokenFile}' '${runConfig}'
''}
${lib.optionalString (cfg.minioAccessKeyId != null) ''
${replaceSecretBin} '#minioaccesskeyid#' '${cfg.minioAccessKeyId}' '${runConfig}'
''}
${lib.optionalString (cfg.minioSecretAccessKey != null) ''
${replaceSecretBin} '#miniosecretaccesskey#' '${cfg.minioSecretAccessKey}' '${runConfig}'
''}
${lib.optionalString (cfg.captcha.secretFile != null) ''
${replaceSecretBin} '#captchasecret#' '${cfg.captcha.secretFile}' '${runConfig}'
''}