monolith: add forgejo runner

hosts/phantom/forgejo.nix

@@ -15,6 +15,14 @@ in
     };
   };
 
+  services.openssh = {
+    authorizedKeysFiles = [
+      "${config.services.forgejo.stateDir}/.ssh/authorized_keys"
+    ];
+    # Recommended by forgejo: https://forgejo.org/docs/latest/admin/recommendations/#git-over-ssh
+    settings.AcceptEnv = "GIT_PROTOCOL";
+  };
+
   services.forgejo = {
     enable = true;
     database.type = "postgres";

user/pass.nix

@@ -11,7 +11,7 @@
       git-sync = {
         enable = true;
         repositories.password-store = {
-          uri = "forgejo@lelgenio.xyz:lelgenio/password-store";
+          uri = "git@git.disroot.org:lelgenio/password-store";
           path = toString config.programs.password-store.settings.PASSWORD_STORE_DIR;
         };
       };