From def715c36c5511591b2759f3e2f505e23ecd2b38 Mon Sep 17 00:00:00 2001
From: Astra Logical <booksandpi@gmail.com>
Date: Tue, 21 Jul 2026 18:22:22 -0400
Subject: [PATCH] Force forgejo to use static ssh keys

---
 data-restorer.yaml                       |  2 +-
 services/forgejo/forgejo-deployment.yaml | 15 +++++++++++++++
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/data-restorer.yaml b/data-restorer.yaml
index d48a5d1..89be724 100644
--- a/data-restorer.yaml
+++ b/data-restorer.yaml
@@ -14,4 +14,4 @@ spec:
   volumes:
   - name: target-volume
     persistentVolumeClaim:
-      claimName: calibre-web-config-pvc
+      claimName: forgejo-data
diff --git a/services/forgejo/forgejo-deployment.yaml b/services/forgejo/forgejo-deployment.yaml
index e72094e..8a22db9 100644
--- a/services/forgejo/forgejo-deployment.yaml
+++ b/services/forgejo/forgejo-deployment.yaml
@@ -18,6 +18,21 @@ spec:
       labels:
         app: forgejo
     spec:
+      securityContext:
+        fsGroup: 1000
+      initContainers:
+        - name: fix-ssh-permissions
+          image: busybox:latest
+          command:
+            - sh
+            - -c
+            - |
+              mkdir -p /data/ssh
+              chown -R 1000:1000 /data/ssh
+              chmod 700 /data/ssh
+          volumeMounts:
+            - name: forgejo-data
+              mountPath: /data
       containers:
         - name: forgejo
           image: codeberg.org/forgejo/forgejo:10