home: add ooknet.org forgejo ssh configuration

flake.lock

@@ -166,6 +166,24 @@
         "type": "github"
       }
     },
+    "flake-parts_3": {
+      "inputs": {
+        "nixpkgs-lib": "nixpkgs-lib_3"
+      },
+      "locked": {
+        "lastModified": 1726153070,
+        "narHash": "sha256-HO4zgY0ekfwO5bX0QH/3kJ/h4KvUDFZg8YpkNwIbg1U=",
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "rev": "bcef6817a8b2aa20a5a6dbb19b43e63c5bf8619a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "hercules-ci",
+        "repo": "flake-parts",
+        "type": "github"
+      }
+    },
     "flake-utils": {
       "locked": {
         "lastModified": 1629284811,
@@ -201,7 +219,7 @@
     },
     "flake-utils_3": {
       "inputs": {
-        "systems": "systems_6"
+        "systems": "systems_7"
       },
       "locked": {
         "lastModified": 1726560853,
@@ -679,6 +697,21 @@
         "type": "github"
       }
     },
+    "nix-filter": {
+      "locked": {
+        "lastModified": 1710156097,
+        "narHash": "sha256-1Wvk8UP7PXdf8bCCaEoMnOT1qe5/Duqgj+rL8sRQsSM=",
+        "owner": "numtide",
+        "repo": "nix-filter",
+        "rev": "3342559a24e85fc164b295c3444e8a139924675b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "nix-filter",
+        "type": "github"
+      }
+    },
     "nix-index-db": {
       "inputs": {
         "nixpkgs": [
@@ -739,6 +772,18 @@
         "url": "https://github.com/NixOS/nixpkgs/archive/50eb7ecf4cd0a5756d7275c8ba36790e5bd53e33.tar.gz"
       }
     },
+    "nixpkgs-lib_3": {
+      "locked": {
+        "lastModified": 1725233747,
+        "narHash": "sha256-Ss8QWLXdr2JCBPcYChJhz4xJm+h/xjl4G0c0XlP6a74=",
+        "type": "tarball",
+        "url": "https://github.com/NixOS/nixpkgs/archive/356624c12086a18f2ea2825fed34523d60ccc4e3.tar.gz"
+      },
+      "original": {
+        "type": "tarball",
+        "url": "https://github.com/NixOS/nixpkgs/archive/356624c12086a18f2ea2825fed34523d60ccc4e3.tar.gz"
+      }
+    },
     "nixpkgs-stable": {
       "locked": {
         "lastModified": 1720386169,
@@ -985,6 +1030,29 @@
         "type": "github"
       }
     },
+    "ooknet-website": {
+      "inputs": {
+        "flake-parts": "flake-parts_3",
+        "nix-filter": "nix-filter",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
+        "systems": "systems_5"
+      },
+      "locked": {
+        "lastModified": 1728305902,
+        "narHash": "sha256-761elKy4m30bx9+3QTlc2MGlRbESek/klbufIP75UqI=",
+        "ref": "refs/heads/master",
+        "rev": "b0ed4617e28b40e43cc286c9cd50d75d0e204668",
+        "revCount": 4,
+        "type": "git",
+        "url": "ssh://git@github.com/ooks-io/website"
+      },
+      "original": {
+        "type": "git",
+        "url": "ssh://git@github.com/ooks-io/website"
+      }
+    },
     "ooks-scripts": {
       "inputs": {
         "nixpkgs": [
@@ -2793,8 +2861,9 @@
         "nix-index-db": "nix-index-db",
         "nixpkgs": "nixpkgs_3",
         "nvf": "nvf",
+        "ooknet-website": "ooknet-website",
         "ooks-scripts": "ooks-scripts",
-        "systems": "systems_5",
+        "systems": "systems_6",
         "zjstatus": "zjstatus"
       }
     },
@@ -2922,6 +2991,21 @@
       }
     },
     "systems_6": {
+      "locked": {
+        "lastModified": 1689347949,
+        "narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",
+        "owner": "nix-systems",
+        "repo": "default-linux",
+        "rev": "31732fcf5e8fea42e59c2488ad31a0e651500f68",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default-linux",
+        "type": "github"
+      }
+    },
+    "systems_7": {
       "locked": {
         "lastModified": 1681028828,
         "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",

flake.nix

@@ -30,6 +30,10 @@
       url = "git+ssh://git@github.com/ooks-io/scripts";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    ooknet-website = {
+      url = "git+ssh://git@github.com/ooks-io/website";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
 
     nvf.url = "github:notashelf/nvf/v0.7";
 

modules/home/console/tools/ssh.nix

@@ -17,6 +17,12 @@ in {
           hostname = "github.com";
           identityFile = "${osConfig.age.secrets.github_key.path}";
         };
+        "git.ooknet.org" = {
+          user = "forgejo";
+          port = 2222;
+          hostname = "git.ooknet.org";
+          identityFile = "${osConfig.age.secrets.ooknet_org.path}";
+        };
       };
     };
   };

outputs/hosts/servers.nix

@@ -10,9 +10,10 @@ in {
       inherit withSystem;
       system = "x86_64-linux";
       hostname = "ooknode";
+      domain = "ooknet.org";
       type = "vm";
       profile = "linode";
-      services = ["website"];
+      services = ["website" "forgejo"];
     };
   };
 }

outputs/lib/builders.nix

@@ -89,6 +89,7 @@
     type,
     profile,
     services,
+    domain ? "",
     additionalModules ? [],
     specialArgs ? {},
   }:
@@ -98,7 +99,7 @@
       additionalModules = concatLists [
         (singleton {
           ooknet.server = {
-            inherit services;
+            inherit domain services;
           };
         })
         core

secrets/secrets.nix

@@ -5,4 +5,5 @@ in {
   "tailscale-auth.age".publicKeys = [users.ooks] ++ workstations;
   "github_key.age".publicKeys = [users.ooks] ++ workstations;
   "spotify_key.age".publicKeys = [users.ooks] ++ workstations;
+  "ooknet_org.age".publicKeys = [users.ooks] ++ workstations;
 }