From 29d7ee601cc40db3b22ad197f9dc76cb67ff9ef8 Mon Sep 17 00:00:00 2001
From: Clara Dautermann <git@cdaut.de>
Date: Wed, 23 Apr 2025 07:38:26 +0200
Subject: [PATCH] skip TLS verify in forgejo migrations

---
 configs/services/forgejo.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/configs/services/forgejo.nix b/configs/services/forgejo.nix
index 1ab8775..7f37ba6 100644
--- a/configs/services/forgejo.nix
+++ b/configs/services/forgejo.nix
@@ -32,6 +32,8 @@ in
       service.DISABLE_REGISTRATION = true;
       repository.USE_COMPAT_SSH_URI = true;
       security.LOGIN_REMEMBER_DAYS = 365;
+      # required because go doesn't recognize Let's Encrypt as a valid CA
+      migrations.SKIP_TLS_VERIFY = true;
     };
   };