From 61036717cb1659906e25be443af62e5fa64bb642 Mon Sep 17 00:00:00 2001
From: iFargle <albert@sysctl.io>
Date: Mon, 25 Dec 2023 11:00:13 +0900
Subject: [PATCH] Update secrets

---
 nixos/common/services/forgejo-runner.nix | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/nixos/common/services/forgejo-runner.nix b/nixos/common/services/forgejo-runner.nix
index 43a39e9a..10b7bcdf 100644
--- a/nixos/common/services/forgejo-runner.nix
+++ b/nixos/common/services/forgejo-runner.nix
@@ -2,12 +2,14 @@
 
     # Set up the secret for the password:
     sops.secrets."services/forgejo_token" = {
-        owner = "gitea-runner";
+        owner = "root";
+        mode = "0444"; # gitea-actions-runner uses "DynamicUser"
         sopsFile = ../../../secrets/secrets.yaml;
+        restartUnits = [ "gitea-actions-runner-${hostname}.service" ];
     };
 
     services.gitea-actions-runner = {
-        package = pkgs.gitea-actions-runner;
+        package = pkgs.forgejo-actions-runner;
         instances."${hostname}" = {
             enable = true;
             name = "${hostname}";