Add a deployment for forgejo-ci

use passed args

tag part

fix secrets

infra/common/nixos/default.nix

@@ -23,9 +23,4 @@ in
   nix.extraOptions = ''
     experimental-features = nix-command flakes
   '';
-
-  boot.loader = {
-    systemd-boot.enable = true;
-    efi.canTouchEfiVariables = true;
-  };
 }

infra/common/proxmox-qemu-vm.nix

@@ -6,6 +6,11 @@
   imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
 
   boot = {
+    loader = {
+      systemd-boot.enable = true;
+      efi.canTouchEfiVariables = true;
+    };
+
     initrd = {
       availableKernelModules = [
         "ata_piix"

infra/forgejo-ci/flake-part.nix

@@ -47,7 +47,7 @@ in
           age.secrets = concatMapAttrs (
             name: secret:
             optionalAttrs (elem hostPublicKey secret.publicKeys) {
-              ${removeSuffix ".age" name}.file = secrets.rootPath + "/${name}";
+              ${removeSuffix ".age" name}.file = secrets.rootPath + "secrets/${name}";
             }
           ) secrets.mapping;