Jalil Salamé - Codeberg.org

network-online.target seems to be correct, I just have bad personal experiences with it (as a user of a linux PC, not as a server admin)

A bit of a technicallity, but we may not want network-online.target since we don't need to be online for silverfish to run, we can still accept connections from the LAN (and NetworkManager...

@cjdesno wrote in conjured/silverfish#151 (comment):

Small nit, it could be placed in a contrib/systemd dir instead (so other integrations, including the flake, could also go there)

This is my forgejo runner's service:

I use sops-nix which decrypts secrets to /run/secrets/ (which is a symlink to /run/secrets.d/$GENERATION so you can update the secrets without overwriting the files).

@earl-warren wrote in forgejo/forgejo#8004 (comment):

You don't need to pass them to the CLI, it picks them up from the Environment

This is probably because StateDirectory=/var/lib/silverfish isn't set

Yup, that can be done

And yes, systemd credentials are the perfect thing for this, you can decrypt a file and pass its value as an env var, or as a path to a decrypted temp file. You can also store the secret in plain...

There are missing $ in those variables

RootDirectory chroots inyo that directory, so it should probanly be /.