feature: Add forgejo

system/sops.nix

@@ -8,6 +8,7 @@ in
 
   sops = {
     defaultSopsFile = "${secretspath}/secrets.yaml";
+
     age = {
       # I'd prefer different OpenSSH keys for different hosts so I'm not 100% screwed if one of my devices get compromised (SSH traffic potentially being decrypted and analyzed).
       # Therefore, we set a custom path for the sops key & let the SSH key be generated automagically.
@@ -15,12 +16,15 @@ in
       keyFile = "/persist/var/lib/sops-nix/key.txt";
       generateKey = false;
     };
+
     secrets = {
       tera_password = {
         neededForUsers = true;
       };
       reverse_proxy_client_privkey = {};
       caddy_docker_env = {};
+      forgejo_db_docker_env = {};
+      forgejo_server_docker_env = {};
     };
   };
 }