add gitea to the keys group

services/gitea.nix

@@ -28,7 +28,7 @@
     appName = "My awesome Gitea server"; # Give the site a name
     database = {
       type = "postgres";
-      password = "password"; # config.sops.secrets."postgres/gitea_dbpass".path
+      passwordFile = "/run/keys/gitea-dbpassword"; # config.sops.secrets."postgres/gitea_dbpass".path
     };
     settings.server = {
       DOMAIN = "git.my-domain.tld";

users/sky.nix

@@ -9,14 +9,14 @@
     enable = true;
     shellAliases = {
       nv = "nvim";
-    }
-  }
+    };
+  };
 
   programs.git = {
     enable = true;
     userName = "Sky Hearn";
     userEmail = "sky.hearn@pm.me";
-  }
+  };
   
   # The state version is required and should stay at the version you
   # originally installed.

users/users.nix

@@ -9,6 +9,7 @@
   users.extraUsers.podman.hashedPassword = "";
   users.users.podman.isNormalUser = true;
   users.users.gitea.isSystemUser = true;
+  users.groups.keys.members = [ "gitea" ];
   
   users.extraUsers.sky.hashedPassword = "";
   users.groups.wheel.members=["sky"];