forgejo.ini is a secret

homelab/docker-compose.yaml

@@ -158,9 +158,12 @@ services:
 
   forgejo:
     image: codeberg.org/forgejo/forgejo:1.18-rootless
-    configs:
+    secrets:
       - source: forgejo.ini
         target: /etc/gitea/app.ini
+        uid: "1000"
+        gid: "1000"
+        mode: 0400
     volumes:
       - type: bind
         source: /srv/sys/forgejo
@@ -288,9 +291,6 @@ configs:
   browser.html:
     file: www/browser.html
     name: browser.html-v3
-  forgejo.ini:
-    file: forgejo.ini
-    name: forgejo.ini-v1
 
 secrets:
   passwd:
@@ -305,6 +305,9 @@ secrets:
   known_hosts:
     file: secrets/known_hosts
     name: known_hosts-v1
+  forgejo.ini:
+    file: secrets/forgejo.ini
+    name: forgejo.ini-v1
 
 networks:
   hostnet: