From 2f5a6d7d6d96cfc43a3f48734f797768f7af94b6 Mon Sep 17 00:00:00 2001
From: crupest <crupest@outlook.com>
Date: Sun, 3 Nov 2024 19:44:19 +0800
Subject: fix(forgejo): change the way to save secrets.

---
 template/forgejo.app.ini.template | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'template')

diff --git a/template/forgejo.app.ini.template b/template/forgejo.app.ini.template
index c77dd75..3bd44c4 100644
--- a/template/forgejo.app.ini.template
+++ b/template/forgejo.app.ini.template
@@ -8,15 +8,15 @@ HTTP_PORT        = 3000
 ROOT_URL         = https://git.${CRUPEST_DOMAIN}
 DISABLE_SSH      = true
 LFS_START_SERVER = true
-LFS_JWT_SECRET = ${CRUPEST_FORGEJO_LFS_JWT_SECRET}
+LFS_JWT_SECRET_URI = file:/data/forgejo-secret/lfs_jwt_secret
 
 [database]
 DB_TYPE = sqlite3
 
 [security]
 INSTALL_LOCK = false
-SECRET_KEY = ${CRUPEST_FORGEJO_SECURITY_KEY}
-INTERNAL_TOKEN = ${CRUPEST_FORGEJO_SECURITY_INTERNAL_TOKEN}
+SECRET_KEY_URI = file:/data/forgejo-secret/secret_key
+INTERNAL_TOKEN_URI = file:/data/forgejo-secret/internal_token
 REVERSE_PROXY_LIMIT = 1
 REVERSE_PROXY_TRUSTED_PROXIES = *
 
@@ -39,7 +39,7 @@ MODE = console,file
 ENABLED = true
 
 [oauth2]
-JWT_SECRET = ${CRUPEST_FORGEJO_OAUTH2_JWT_SECRET}
+JWT_SECRET_URI = file:/data/forgejo-secret/oauth2_jwt_secret
 
 [actions]
 ENABLED = false
-- 
cgit v1.2.3