From 5439576525f6dd71bfefc60e256147726c628963 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=98ystein=20Tveit?= <oysteikt@pvv.ntnu.no>
Date: Tue, 10 Dec 2024 21:04:35 +0100
Subject: [PATCH] bekkalokk/gitea-web: fix SSH access

---
 hosts/bekkalokk/services/gitea/web-secret-provider/default.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hosts/bekkalokk/services/gitea/web-secret-provider/default.nix b/hosts/bekkalokk/services/gitea/web-secret-provider/default.nix
index e502b19..f463d6a 100644
--- a/hosts/bekkalokk/services/gitea/web-secret-provider/default.nix
+++ b/hosts/bekkalokk/services/gitea/web-secret-provider/default.nix
@@ -27,6 +27,7 @@ in
   users.users."gitea-web" = {
     group = "gitea-web";
     isSystemUser = true;
+    shell = pkgs.bash;
   };
 
   sops.secrets."gitea/web-secret-provider/token" = {
@@ -58,6 +59,7 @@ in
           key-dir = "/var/lib/gitea-web/keys/%i";
           authorized-keys-path = "/var/lib/gitea-web/authorized_keys.d/%i";
           rrsync-script = pkgs.writeShellScript "rrsync-chown" ''
+            mkdir -p "$1"
             ${lib.getExe pkgs.rrsync} -wo "$1"
             ${pkgs.coreutils}/bin/chown -R gitea-web:gitea-web "$1"
           '';