{
  den.aspects = {
    neru = {
      nixos =
        { lib, pkgs, config, ... }:
        {
          sops.secrets.forgejo-admin-password.owner = "forgejo";
          systemd.services.forgejo.preStart = 
          let
            adminCmd = "${lib.getExe config.services.forgejo.package} admin user";
            pwd = config.sops.secrets.forgejo-admin-password;
            user = "exp";
          in ''
            ${adminCmd} create --admin --email "root@localhost" --username ${user} --password "$(tr -d '\n' < ${pwd.path})" || true
            ## uncomment this line to change an admin user which was already created
            # ${adminCmd} change-password --username ${user} --password "$(tr -d '\n' < ${pwd.path})" || true
          '';
        };
      };
    };
}