add user forgejo

configuration.nix

@@ -13,4 +13,6 @@
     git tig
     wget
   ];
+
+#  networking.firewall.enable = false;
 }

forgejo.nix

@@ -3,8 +3,6 @@ let
   srv = config.services.forgejo.settings.server;
 in
 {
-  networking.firewall.enable = false;
-
   services.nginx = {
     virtualHosts.${config.services.forgejo.settings.server.DOMAIN} = {
       forceSSL = true;
@@ -16,6 +14,14 @@ in
     };
   };
 
+  users.groups.forgejo = {};
+  users.users.forgejo = {
+    isSystemUser = true;
+    useDefaultShell = true;
+    group = "forgejo";
+    home = config.services.forgejo.stateDir;
+  };
+
   services.forgejo = {
     enable = true;
     database.type = "postgres";