Configure Paseo Forgejo pull-request integration with Tea #70

Closed
opened 2026-07-18 23:56:29 +01:00 by nimmo · 0 comments
Owner

Context

Paseo 0.2.0-beta.1 supports Forgejo pull-request management through the tea CLI. The current NixOS configuration installs Paseo but does not make Tea available to its runtime or provision a Tea login, so the Forgejo PR UI cannot authenticate.

Scope

  • Install pkgs.tea alongside Paseo on desktop and headless Paseo hosts.
  • Provision Tea's https://git.nimmog.uk login declaratively from a dedicated SOPS secret.
  • Keep the existing forgejo/mcp/token separate; it is a Vega bot credential limited to issue/wiki automation.
  • Document the required least-privilege Forgejo token scopes and secret key.

Acceptance criteria

  • Paseo can locate Tea in every configured runtime.
  • Tea has an idempotent, user-owned login configuration for the Forgejo instance without exposing the token in the Nix store or process list.
  • A new SOPS key is documented and is the only manual credential step.
  • nix flake check passes.
## Context Paseo 0.2.0-beta.1 supports Forgejo pull-request management through the `tea` CLI. The current NixOS configuration installs Paseo but does not make Tea available to its runtime or provision a Tea login, so the Forgejo PR UI cannot authenticate. ## Scope - Install `pkgs.tea` alongside Paseo on desktop and headless Paseo hosts. - Provision Tea's `https://git.nimmog.uk` login declaratively from a dedicated SOPS secret. - Keep the existing `forgejo/mcp/token` separate; it is a Vega bot credential limited to issue/wiki automation. - Document the required least-privilege Forgejo token scopes and secret key. ## Acceptance criteria - Paseo can locate Tea in every configured runtime. - Tea has an idempotent, user-owned login configuration for the Forgejo instance without exposing the token in the Nix store or process list. - A new SOPS key is documented and is the only manual credential step. - `nix flake check` passes.
nimmo closed this issue 2026-07-19 00:13:24 +01:00
Sign in to join this conversation.
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
nimmo/nixos-config#70
No description provided.