add gitea db pass to agenix

hosts/profiles/gitea/default.nix

@@ -1,6 +1,9 @@
-{ config, lib, pkgs, ... }:
+{ self, config, lib, pkgs, ... }:
 
 {
+  age.secrets.gitea-dbpass.file = "${self}/secrets/gitea-dbpass.age";
+  age.secrets.gitea-dbpass.owner = "gitea";
+
   services.gitea = {
     enable = true;
     appName = "Sealight Git Forge";
@@ -9,8 +12,7 @@
     httpPort = 3001;
     database = {
       type = "postgres";
-      # passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix
-      password = "somethingunknowablesorry";
+      passwordFile = "/run/agenix/gitea-dbpass";
     };
     settings = {
       metrics = {
@@ -19,10 +21,11 @@
       repository = {
         DEFAULT_BRANCH = "main";
       };
+      # TODO
       "markup.restructuredtext" = {
         ENABLED = true;
         FILE_EXTENSIONS = ".rst";
-        RENDER_COMMAND = "timeout 30s pandoc +RTS -M512M -RTS -f rst";
+        RENDER_COMMAND = "pandoc +RTS -M512M -RTS -f rst";
         IS_INPUT_FILE = false;
       };
       # TODO