ferrumboll/shoggoth
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix Forgejo backup verification path #11

Merged
ferrumboll merged 1 commit from ferrumboll/fix-forgejo-backup-verify-path-2026w28 into master 2026-07-17 06:46:21 +00:00
Conversation 0 Commits 1 Files changed 1 +7 -6
ferrumboll commented 2026-07-06 09:08:34 +00:00
Owner
Copy link

Summary

  • Use the absolute /run/current-system/sw/bin/restic-forgejo wrapper from the Forgejo backup verification script.
  • Fixes the deployed forgejo-backup-verify.service failing because systemd's service PATH did not include the generated Restic wrapper.

Security impact

  • Criticality: Medium
  • Risk addressed: Backup verification was not running, reducing confidence that Forgejo backups can be restored during an incident.

Verification

  • nix develop --command bash -lc 'nixfmt services/forgejo/default.nix'
  • nix develop --command bash -lc 'nix build .#nixosConfigurations.app-server-1.config.system.build.toplevel --no-link'

Notes

  • nix develop --command nix fmt currently fails with unexpected end of input; single-file nixfmt succeeded.
  • Live audit evidence: forgejo-backup-verify.service failed on app-server-1 with restic-forgejo wrapper not found, while /run/current-system/sw/bin/restic-forgejo exists.
## Summary - Use the absolute `/run/current-system/sw/bin/restic-forgejo` wrapper from the Forgejo backup verification script. - Fixes the deployed `forgejo-backup-verify.service` failing because systemd's service `PATH` did not include the generated Restic wrapper. ## Security impact - Criticality: Medium - Risk addressed: Backup verification was not running, reducing confidence that Forgejo backups can be restored during an incident. ## Verification - [x] `nix develop --command bash -lc 'nixfmt services/forgejo/default.nix'` - [x] `nix develop --command bash -lc 'nix build .#nixosConfigurations.app-server-1.config.system.build.toplevel --no-link'` ## Notes - `nix develop --command nix fmt` currently fails with `unexpected end of input`; single-file `nixfmt` succeeded. - Live audit evidence: `forgejo-backup-verify.service` failed on app-server-1 with `restic-forgejo wrapper not found`, while `/run/current-system/sw/bin/restic-forgejo` exists.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ferrumboll/shoggoth!11
No description provided.