From e8fcf8102c6032055dd77f06e7ef980c1771f42d Mon Sep 17 00:00:00 2001
From: Alexander Heldt <me@alexanderheldt.se>
Date: Sun, 4 Jan 2026 19:31:28 +0100
Subject: [PATCH] tadpole: Fix `gitea` oauth2 issuer URL

To have a trailing slash, which is expected of pre gitea 1.25
`tailscale` integrations
---
 hosts/tadpole/modules/gitea/default.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/hosts/tadpole/modules/gitea/default.nix b/hosts/tadpole/modules/gitea/default.nix
index 671b3d5..65a52e8 100644
--- a/hosts/tadpole/modules/gitea/default.nix
+++ b/hosts/tadpole/modules/gitea/default.nix
@@ -67,6 +67,10 @@ in
           HTTP_PORT = 3001;
         };
 
+        oauth2 = {
+          JWT_CLAIM_ISSUER = "https://${gitDomain}/";
+        };
+
         database = {
           type = "sqlite3";
           passwordFile = config.age.secrets.gitea-dbpassword.path;