fix: start tailscale before forgejo

If tailscale is not up then we can't reach the database.

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>

hosts/hosting-01/git/forgejo.nix

@@ -63,7 +63,10 @@ in
     };
   };
 
-  systemd.services.forgejo.preStart = ''
+  systemd.services.forgejo = {
+    requires = [ "tailscaled.service" ];
+
+    preStart = ''
       auth="${lib.getExe config.services.forgejo.package} admin auth"
 
       echo "Trying to find existing sso configuration for Authelia"...
@@ -91,6 +94,7 @@ in
           --auto-discover-url https://auth.escapeangle.com/.well-known/openid-configuration
       fi
     '';
+  };
 
   services.nginx.virtualHosts."git.escapeangle.com" = {
     forceSSL = true;